Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

openchoreo — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in openchoreo, with AI-generated Chinese analysis, references, and POCs.

Vendor: openchoreo

CVE ID Title CVSS Severity Published
CVE-2026-73843 OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs CWE-306 9.6 Critical 2026-08-13
CVE-2026-73842 OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation CWE-269 9.0 Critical 2026-08-13
CVE-2026-73841 OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints CWE-639 8.8 High 2026-08-13
CVE-2026-73840 OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass) CWE-287 5.3 Medium 2026-08-13
CVE-2026-73667 OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods CWE-78 8.8 High 2026-08-13

All 5 known CVE vulnerabilities affecting openchoreo with full Chinese analysis, references, and POCs where available.