CVE-2021-44458

CVE-2021-44458 affects Lens (versions 5.2.6 and earlier). The root cause is lack of websocket authentication, allowing a malicious website to cause the victim's browser to connect to Lens and operate the local terminal, enabling arbitrary commands to be executed as the Lens user (remote code exec...

CVE-2021-23154

CVE-2021-23154 affects Lens prior to 5.3.4. Affected component: custom helm chart configuration that builds helm commands by concatenating provided arguments, which are then executed in the user’s shell. Root cause: unsafe string concatenation enables arbitrary shell command execution. Impact: po...