CVE-2026-53474

Name of the Vulnerable Software and Affected Versions migration-planner (affected versions not specified)

Description A remote authenticated attacker can exploit a flaw by uploading a specially crafted RVTools .xlsx file. Due to improper input sanitization, malicious SQL embedded within a spreadsheet cell is executed during the processing of cluster names. This SQL Injection enables arbitrary file reading on the system, which may expose sensitive data such as Kubernetes service account tokens and other credentials, potentially leading to a full compromise of the SaaS environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.