Threats Tagged 'cve-2026-50565'
View all threats tagged with 'cve-2026-50565'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-50565'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-8wcj-mfrc-jx5q: Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder containerCVE-2026-50565 0 Fission builder pods prior to version 1.24.0 automatically mounted the fission-builder ServiceAccount token into user-supplied builder containers. This allowed code running in these containers to inherit the fission-builder identity, which has namespace-wide read access to Secrets and ConfigMaps in the builder namespace. The vulnerability enables subjects with create or update permissions on Environment CRDs to read all Secrets and ConfigMaps in the builder namespace. The issue was fixed in version 1.24.0 by disabling automatic token mounting on the user builder container and restricting token access to a dedicated fetcher sidecar. Join the discussion | GCVE Database | 06/30/2026, 18:20:03 UTC Added: 06/30/2026, 23:36:08 UTC |
Showing 1 to 1 of 1 result