tetragon

Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...

tetragon-dirtyfrag

tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...

tetragon v1.7.1

Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, kapp-controller, cloud-provider-aws, kube-vip-cloud-provider, cloud-provider-azure, azure-service-operator, cluster-api-ipam-provider-in-cluster, tekton-chains, hubble-ui, kots, kubernetes-csi-external-attacher, cluster-autoscaler, spqr, argocd-image-update...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, kustomize, amass, newrelic-nri-statsd, rancher-agent, percona-server-mongodb-operator, spicedb-operator, kubelet-csr-approver, argo-cd, hubble,...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, cloud-provider-azure, crossplane-provider-aws-sns, sealed-secrets, kustomize, amass, newrelic-nri-statsd, rancher-agent, percona-server-mongodb-operator, spicedb-operator, kubelet-csr-approver, argo-cd, hubble,...

PT-2026-67993

В известном решении по безопасности Tetragon закрыли «Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods» - CVE-2026-65960 CVSS 8.8. Суть простая: агент поднимает свой административный gRPC API по TCP на localhost:54321 и без какой-либо аутентификации. Таким образом любой...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: emissary, kapp-controller, cloud-provider-aws, kube-vip-cloud-provider, cloud-provider-azure, azure-service-operator, cluster-api-ipam-provider-in-cluster, tekton-chains, hubble-ui, kots, kubernetes-csi-external-attacher, cluster-autoscaler, spqr, argocd-image-update...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, datadog-operator, policy-controller-fips, terraform-provider-time, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, weaviate, google-guest-agent, kapp-controller, spiffe-helper-fips, litestream, mc, ops-agent, k8ssandra-client...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, datadog-operator, policy-controller-fips, terraform-provider-time, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, weaviate, google-guest-agent, kapp-controller, spiffe-helper-fips, litestream, mc, ops-agent, k8ssandra-client...