Threat database

CVE-2026-53999 is an improper input validation vulnerability in the radius-project radius platform prior to version 0.58.0. The Kubernetes controller deserializes user-controlled annotations on Deployments without verifying ownership, allowing an attacker with annotation modification permissions to trigger privileged deletion of container resources belonging to other tenants in multi-tenant environments. This can cause denial of service by deleting recoverable container resources. The issue is fixed in version 0.58.0.