CVE-2026-119115

The aws-privateca-issuer component (AWS Private CA Connector for Kubernetes) before v1.10.1 is vulnerable to incorrect authorization in its issuer resolution logic. This flaw could allow an authenticated remote user to obtain certificates, including subordinate CA certificates, signed by a cluste...