kubetail-org vulnerabilities and threats

Kubetail versions prior to 0.14.0 have a Cross-Site WebSocket Hijacking (CSWSH) vulnerability due to missing Origin header validation on WebSocket endpoints in its real-time logging dashboard. This flaw allows a malicious web page visited by a user with an active Kubetail session to open a WebSocket connection to the dashboard and read Kubernetes logs in real time. The vulnerability affects both desktop and cluster deployments. The issue is fixed in version 0.14.0.