CVE-2026-54462

Name of the Vulnerable Software and Affected Versions Knative pkg versions prior to 0.0.0-20260531000007-52dbd5ece63f

Description The admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview using json.NewDecoder(io.TeeReader(r.Body, &bodyBuffer)) within an http.HandlerFunc without implementing an http.MaxBytesReader or a similar body-size limit. A pod-network client can send an oversized POST request to an admission webhook, leading the decoder and bodyBuffer to retain amplified copies of the request. This can result in the controller pod exhausting its memory and being OOM-killed (Out-Of-Memory killed), which is a state where the operating system terminates a process because it has consumed too much RAM. Downstream consumers using the shared webhook server, such as Knative, Tekton, KEDA, Sigstore policy-controller, and Kpack, inherit this behavior. Depending on the failurePolicy configuration, this can either interrupt admission if set to Fail or make the affected webhook unavailable if set to Ignore.

Recommendations Update to version 0.0.0-20260531000007-52dbd5ece63f.