CVE-2026-87114

Name of the Vulnerable Software and Affected Versions kube-compare (affected versions not specified)

Description A flaw exists when processing a container:// reference path, where the tool incorrectly executes the entrypoint of an untrusted container image instead of extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator's workstation. If the Docker daemon requires elevated privileges, the executed code may run with root-mediated daemon privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.