Skip to content

CVE record · 1 source

CVE-2026-105311

CVSS 7.7

The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set…

Vendor: Kubernetes
Product: Kubernetes
CVSS: 7.7
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 11d ago

The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set…

The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set spec.kafkaClusters[].credentials.kafkaUser.namespace to any namespace. The operator…

CVSS 7.7 CVE-2026-105311 Kubernetes