CVE-2026-50565 Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission builder pods were created with ServiceAccountName: fission-builder and no AutomountServiceAccountToken: false, so the...

PT-2024-37897 · Ansible · Ansible Automation Controller

Name of the Vulnerable Software and Affected Versions: Ansible Automation Controller affected versions not specified Description: An improper authorization flaw exists in the Ansible Automation Controller, allowing an attacker using the k8S API server to send an HTTP request with a service accoun...