PT-2026-89302
CVE-2026-80352
·
تاريخ النشر
2026-09-10
·
تاريخ التحديث
2026-10-26
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache Camel K versions 2.0.0 through 2.9.2
Apache Camel K versions 2.10.1 through 2.10.1
Description
A YAML injection issue in the custom resource configuration allows an authorized author to inject arbitrary Kubernetes objects. This can lead to unauthorized resource creation using the privileges of the operator. The flaw specifically exists in the
serviceAccountName field of the Master trait.Recommendations
Upgrade to version 2.9.3.
Upgrade to version 2.10.2.
Upgrade to version 2.11.0.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾