devtron-labs

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

devtron-labs records in CISA KEV

No devtron-labs vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-57186 CVE-2026-82882 · GHSA-mrqp-7v92-wchj

Devtron through 2.2.0 Missing Authorization via webhook API token endpoint

HIGH 73

Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin API tokens.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00569 Published 2026-08-31 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0