CVE-2026-123665
LOW
INFO
Priority: 0.00
BB Relevance:
20/100
Published: 2026-11-06
Modified: 2026-11-09
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Passive
AT:
None
VC:
Low
VI:
None
VA:
None
Description
A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised.
Weakness Classification (2)
Affected Software (32)
| Vendor | Product | Version |
|---|---|---|
| n/a | kubescape | 4.0.0 |
| n/a | kubescape | 4.0.1 |
| n/a | kubescape | 4.0.2 |
| n/a | kubescape | 4.0.3 |
| n/a | kubescape | 4.0.4 |
| n/a | kubescape | 4.0.5 |
| n/a | kubescape | 4.0.6 |
| n/a | kubescape | 4.0.7 |
| n/a | kubescape | 4.0.8 |
| n/a | kubescape | 4.0.9 |
| n/a | kubescape | 4.0.10 |
| n/a | kubescape | 4.0.11 |
| n/a | kubescape | 4.0.12 |
| n/a | kubescape | 4.0.13 |
| n/a | kubescape | 4.0.14 |
| n/a | kubescape | 4.0.15 |
| n/a | kubescape | 4.0.0 |
| n/a | kubescape | 4.0.1 |
| n/a | kubescape | 4.0.2 |
| n/a | kubescape | 4.0.3 |
| n/a | kubescape | 4.0.4 |
| n/a | kubescape | 4.0.5 |
| n/a | kubescape | 4.0.6 |
| n/a | kubescape | 4.0.7 |
| n/a | kubescape | 4.0.8 |
| n/a | kubescape | 4.0.9 |
| n/a | kubescape | 4.0.10 |
| n/a | kubescape | 4.0.11 |
| n/a | kubescape | 4.0.12 |
| n/a | kubescape | 4.0.13 |
Showing 30 of 32 entries
References & Advisories (9)
vdb-entry
technical-description
third-party-advisory
third-party-advisory
signature
permissions-required
product
patch
patch
issue-tracking
patch
issue-tracking