CVE-2026-102340

Name of the Vulnerable Software and Affected Versions Telepresence versions prior to 2.31.0

Description The Traffic Manager gRPC API on port 8081 accepts unauthenticated callers from the cluster network. The ArriveAsClient function stores a caller-supplied Namespace relying solely on the ManagesNamespace manager watchlist check, and the CreateIntercept function allows targeting any managed namespace without verifying the session's Kubernetes RBAC (Role-Based Access Control), which is a method of regulating access to computer or network resources based on the roles of individual users. An attacker with network access to the manager from any pod can register in an arbitrary managed namespace, create service intercepts, and receive intercepted traffic to obtain the victim pod's container environment, including secrets, tokens, and API keys.

Recommendations Update to version 2.31.0.