CVE-2026-120656

OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any RBAC pod...

CVE-2026-120656

The OpenKruise kruise-manager component exposes an unauthenticated ppof endpoint on 0.0.0.0:8090 when the feature is enabled. This configuration flaw allows any RBAC pod to trigger a Denial of Service (DoS) attack. Remediation is associated with the release available in the provided references.

CVE-2026-120656 CVE-2026-120656

OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any RBAC pod...

EUVD-2026-115361

OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any RBAC pod...

CVE-2026-120656: OpenKruise kruise-manager: OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can…

OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any RBAC pod...