kube-logging

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

kube-logging records in CISA KEV

No kube-logging vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Logging-operator 1 record HIGH

Records

2 records

TI-2026-39502 CVE-2026-54680 · GHSA-mjqf-28ph-426h

Logging operator has Fluentd configuration injection that allows remote code execution

HIGH 76

Logging operator automates the deployment and configuration of Kubernetes logging pipelines.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00785 Published 2026-07-29 Fixed in 6.6.0, 0.0.0-20260608145523-cf437d7f1e05 CWE-74

TI-2024-24310 CVE-2024-36541 · GHSA-f7pf-xqmh-qxj2

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data…

HIGH 73

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00412 Published 2024-07-24 No fix listed CWE-276

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0