This update for cadvisor fixes several security issues identified by SUSE Product Security Team. Notably, CVE-2026-84303 describes a vulnerability in the xDS RBAC HTTP filter implementation within the google.golang.org/grpc component used by cadvisor. This flaw allows an attacker to bypass authorization policies, potentially enabling unauthorized access. The update also addresses CVE-2026-84445 and CVE-2026-84304 as referenced by SUSE bug tracking numbers bsc#1279044 and bsc#1279224 respectively, though specific technical details for these are not provided in the input data.

The primary impact is the potential bypass of authorization policies in cadvisor due to the xDS RBAC HTTP filter vulnerability, which could allow unauthorized users to perform actions that should be restricted. This represents a critical security risk as it undermines access controls.

A security update for cadvisor has been released by the SUSE Product Security Team to fix these vulnerabilities. Users should apply this update promptly to remediate the authorization bypass issue and other related vulnerabilities. Patch status is not explicitly confirmed in the input data; therefore, verify the availability of the update and apply it according to the vendor advisory.