CVE-2026-65960

The Tetragon eBPF-based security project, in versions prior to 1.7.0 , is vulnerable to an unauthenticated access flaw. A default Helm configuration exposes the privileged Tetragon gRPC API through an unauthenticated TCP listener on localhost:54321 . An attacker capable of running or compromising...

CVE-2026-65960 Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods

Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default that exposes the privileged Tetragon gRPC API through an unauthenticated TCP listener on localhost:54321. An attacker who can run or compromise same-node hostNetwork pods...

EUVD-2026-118486

Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default that exposes the privileged Tetragon gRPC API through an unauthenticated TCP listener on localhost:54321. An attacker who can run or compromise same-node hostNetwork pods...