KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. (CVE-2026-82473)
Description
KubeEdge CloudCore versions through 1.23.1 have a vulnerability where node task status reports sent to its HTTPS server on port 10002 are accepted without authentication verification. This allows attackers to falsify upgrade job statuses, misleading the control plane about node upgrade progress and potentially blocking further upgrade scheduling.
CVSS v3.1
Score 8.2high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
KubeEdge CloudCore through version 1.23.1 does not verify authentication on node task status reports received on its HTTPS server (port 10002). This lack of authentication allows an attacker to send forged status reports marking upgrade jobs as succeeded or failed. Consequently, the control plane can be deceived about the actual node upgrade status, which may disrupt or block subsequent upgrade scheduling processes. The vulnerability is identified as CWE-306 (Missing Authentication for Critical Function).
Potential Impact
Attackers can manipulate the upgrade status of nodes by sending unauthenticated status reports to CloudCore, causing the control plane to have incorrect information. This can block or disrupt the scheduling of further upgrades, potentially impacting system maintenance and stability. There is no direct confidentiality impact, but integrity of upgrade status information is compromised, and availability impact is low.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to CloudCore's port 10002 to trusted sources only to reduce exposure. Monitor for unauthorized access attempts if possible.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-7v3q-r4cr-w389
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-82473"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a944bd8acd9273b49b25ba4
Added to database: 08/30/2026, 15:27:20 UTC
Last enriched: 09/08/2026, 00:53:35 UTC
Last updated: 10/13/2026, 18:48:24 UTC
Views: 101
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.