If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

CVE-2026-73667 - OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

CVE ID : CVE-2026-73667 Published : Aug. 13, 2026, 10:17 p. m. • 48 minutes ago Description : OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1. 0. 4, 1. 1. 4, and 1. 2. 0-rc. 2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -c instead of passing the values through container. env, allowing arbitrary commands to run in workflow pods while affected privileged Podman templates lacked hostUsers: false. This issue is fixed in versions 1. 0. 4, 1. 1. 4, and 1. 2. 0-rc. 2. Severity: 8.8 • HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

·CVEFeed
Read →

You've reached the end of current stories for this search.