Permission issues in kubescape output file writer
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-266.
Summary
kubescape versions 4.0.0 through 4.0.15 are affected. In the GetWriter function of the Output component, manipulating the outputFile argument can lead to permission issues (CWE-266). An attacker with local access and low privileges can trigger this flaw.
Written with Claude Haiku 5.5 from the sources below · 2026-11-06
Description from the CNA
A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | kubescape | 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; 4.0.7; 4.0.8; 4.0.9; 4.0.10; 4.0.11; 4.0.12; 4.0.13; 4.0.14; 4.0.15 | 4.0.16 | Patch available | CNA |
- kubescape Vendor— Affected 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; 4.0.7; 4.0.8; 4.0.9; 4.0.10; 4.0.11; 4.0.12; 4.0.13; 4.0.14; 4.0.15 Fixed in 4.0.16 Patch available CNA
CPE names CNA · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:kubescape:kubescape:*:*:*:*:*:*:*:* | — | — | — |
- cpe:2.3:a:kubescape:kubescape:*:*:*:*:*:*:*:* Versions — — ·—
Remediation
Upgrade kubescape to version 4.0.16, which fixes the issue through patch d90f773.
Written with Claude Haiku 5.5 from the sources below · 2026-11-06
- Fix · CNA kubescape Fixed in 4.0.16
Timeline
- 2026-11-06 Threatist record created from CVE-2026-123665
- 2026-11-06 Alias added: GHSA-q6h3-cwc9-c654
References
Sources
- CVE-2026-123665 · CVE Program
- CVE-2026-123665 · NVD
- FIRST EPSS
- GHSA-q6h3-cwc9-c654 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences