All 4 CVE vulnerabilities found in kubewarden-controller, with AI-generated Chinese analysis, references, and POCs.
Vendor: kubewarden
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-42541 | Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call CWE-862 | 4.3 | Medium | 2026-05-12 |
| CVE-2026-29773 | kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding CWE-863 | 4.3 | Medium | 2026-03-09 |
| CVE-2025-24376 | The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources CWE-285 | 6.5 | Medium | 2025-01-30 |
| CVE-2025-24784 | kubewarden-controller has an Information leak via AdmissionPolicyGroup Resource CWE-285 | 4.3 | Medium | 2025-01-30 |
All 4 known CVE vulnerabilities affecting kubewarden-controller with full Chinese analysis, references, and POCs where available.