CVE-2026-92393 Apache YuniKorn: Admission control bypass via workload UPDATE operation

Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE...

CVE-2026-92393

Apache YuniKorn versions 1.9.0 and earlier are vulnerable to an admission control bypass because the software fails to implement label and user annotation checks during the workload UPDATE action. This affects several Kubernetes objects, including deployments , replicasets , statefulsets , daemon...