CVE-2026-87114 Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

CVE-2026-87114: Inclusion of Functionality from Untrusted Control Sphere

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...