Kubernetes authorization issue vulnerability

Vulnerabilities related to authorization issues exist in Kubernetes versions from 1.34.0 through 1.34.11, from 1.35.0 through 1.35.8, from 1.36.0 through 1.36.4, and in version 1.37.0 and earlier. These vulnerabilities stem from confusion attacks on the StatefulSet controller. Users possessing...

CVE-2026-45760

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

CVE-2026-24176

NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references. A successful exploit of this vulnerability might lead to data tampering...