CVE-2026-91923

KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attackers can supply arbitrary URLs to reach internal services and exfiltrate...

CVE-2026-91923

KubeSphere through 4.1.3 is affected by a server-side request forgery (SSRF) vulnerability in its git credential verification endpoint . The endpoint accepts caller-supplied URLs without allowlist restrictions, allowing authenticated attackers to direct requests to internal services and exfiltrat...