Security fixes in fluent-operator-fips 3.4.0-r7 (CVE-2026-27139)
Affects fluent-operator-fipsSource GCVE Database
Not known to be exploited · CVSS 2.5 Low · fixed in 3.4.0-r7 : update fluent-operator-fips when convenient.
Data as of 10/25/2026, 04:40:12 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 3.4.0-r7
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartfluent-operator-fips | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available in fluent-operator-fips version 3.4.0-r7 that fixes CVE-2026-27139 along with three other vulnerabilities. Users should update to this version to remediate the issues.
Description
The fluent-operator-fips package version 3.4.0-r7 addresses four security vulnerabilities, including CVE-2026-27139. This release provides security fixes to mitigate these issues. No CVSS score or detailed technical impact information is available for CVE-2026-27139. There are no known exploits in the wild for this vulnerability. The affected version is specifically 3.4.0-r7.
Impact
The impact details for CVE-2026-27139 are not provided. Since no known exploits are reported and no CVSS score is available, the exact impact is unclear. The update to version 3.4.0-r7 mitigates the vulnerability.
Summary
CVE-2026-27139 is one of four vulnerabilities fixed in the fluent-operator-fips package version 3.4.0-r7. The package update includes security fixes that address these vulnerabilities. No further technical details or CVSS scoring are provided, and no active exploitation has been reported. The vulnerability affects the CleanStart ecosystem and is not related to a cloud service.