CVE-2024-53349

7.4 highEPSS 0.4%

High (7.4) in linuxfoundation kuadrant. EPSS 0.4% chance of exploitation in the next 30 days.

Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the secretes component in the k8s cluster

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2025-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linuxfoundation:kuadrant

References

https://gist.github.com/HouqiyuA/2a34c8f95dac7d9d8d7df7732403f383
https://github.com/Kuadrant/kuadrant-operator
https://www.cncf.io/projects/kuadrant/

Check your stack JSON