Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
operator-framework records in CISA KEVNo operator-framework vulnerabilities are listed in CISA KEV.
Priority LOW 28
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00243 · Published 2025-08-07 · Partial fix · 0.15.2, v4.17.39-2 +119 CWE-276
Open these records in search →