CVE-2026-61850

The Kargo software (versions 0.6.0 until 1.8.14, 1.9.9, and 1.10.8) is vulnerable to privilege escalation due to authorization flaws in the project-scoped RBAC API. The root cause is that the API performs only a coarse resource-kind edit check rather than verifying each individual permission bein...

CVE-2026-61850: akuity kargo: Kargo manages and automates the promotion of software artifacts

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the project-scoped RBAC API let an authenticated user with delegated permission to manage a Project's Roles or ServiceAccounts confer permissions exceeding the...

Security Bulletin: Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

Summary Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability CVE-2026-110720 is fixed in consul-k8s 2.1.0 and 1.8.18. Vulnerability Details...

CVE-2026-15218

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceAccounts, either through a remote code...

CVE-2026-15218 Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceAccounts, either through a remote code...

EUVD-2026-60199

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceAccounts, either through a remote code...

Missing Authorization

Woodpecker is vulnerable to Missing Authorization. The vulnerability is due to accepting user-controlled backendoptions.kubernetes.serviceAccountName values without authorization checks, which allows an attacker with push access to run pipeline pods under arbitrary Kubernetes ServiceAccounts and...

GO-2026-5289 Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dots in istio.io/istio

Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dots in istio.io/istio...

CVE-2026-39350

Istio is an open platform to connect, manage, and secure microservices. In versions 1.25.0 through 1.27.8, 1.28.0 through 1.28.5, 1.29.0, and 1.29.1, the serviceAccounts and notServiceAccounts fields in AuthorizationPolicy incorrectly interpret dots . as a regular expression matcher. Because . is...

CVE-2026-39350

CVE-2026-39350 (Istio) : The vulnerability affects Istio AuthorizationPolicy fields serviceAccounts and notServiceAccounts, where a dot (.) is incorrectly treated as a regular expression matcher. As a result, an ALLOW rule targeting a service account such as cert-manager.io can also match similar...

CVE-2026-39350: Incorrect Regular Expression

Istio is an open platform to connect, manage, and secure microservices. In versions 1.25.0 through 1.27.8, 1.28.0 through 1.28.5, 1.29.0, and 1.29.1, the serviceAccounts and notServiceAccounts fields in AuthorizationPolicy incorrectly interpret dots . as a regular expression matcher. Because . is...