CVE-2026-93685

Name of the Vulnerable Software and Affected Versions multicluster-observability-addon (affected versions not specified)

Description A misconfiguration in the underlying addon-framework library allows a remote attacker to access a debug endpoint without authentication. After establishing a basic encrypted connection, an attacker can disclose sensitive operational information, including goroutine, heap, and command-line details. This issue does not allow for direct remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.