Daily Digest
User Safety: safe
The most urgent issue is CVE-2026-85594 in Traefik (Kubernetes), a CISA KEV-confirmed critical vulnerability allowing namespace bypass and credential theft via misconfigured middleware injection. Immediate patching to v3.7.12 is required. Additional critical vulnerabilities in Traefik, Crawl4AI, and Contrast require urgent attention, with two more KEV entries (CVE-2026-85596 and CVE-2026-88877) demanding immediate remediation. Docker and Kubernetes systems face active exploitation risks, while Contrast’s confidential computing runtime has multiple high-severity flaws affecting integrity and access controls.
Summary: Traefik v3.7.1 fails to enforce crossProviderNamespaces restrictions, allowing namespace-limited tenants to inject operator-owned middlewares and recover backend credentials. Exploitable via Kubernetes Ingress provider annotations.
Affected Features / Interoperability: Kubernetes Ingress provider, Service annotations, middleware injection. Could compromise backend credentials and tenant isolation.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Traefik v3.7.0–v3.7.10 has an authentication bypass in Kubernetes Ingress NGINX provider due to TLS option naming conflicts, allowing unauthenticated access to protected routes.
Affected Features / Interoperability: TLS configuration, NGINX Ingress provider, client certificate authentication. Could bypass TLS client verification.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Traefik v3.7.0–v3.7.11 mishandles Ingresses with both authentication and www-redirect annotations, creating a sibling router that bypasses authentication for non-matching requests.
Affected Features / Interoperability: Ingress authentication, redirect middleware, host matching. Could expose protected backends without authentication.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Contrast v1.14.0–v1.23.1 generates runtime policies that fail to verify container image digests, allowing image substitution via Kata agent API.
Affected Features / Interoperability: Container image policies, Kata Containers, confidential computing integrity. Could enable arbitrary code execution in confidential containers.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Apache Camel Karavan v4.0.0–v4.22.0 applies arbitrary Kubernetes resources from `kubernetes.yaml` without validation, enabling privilege escalation.
Affected Features / Interoperability: Karavan deployment, Kubernetes resource management, pod security options. Could allow hostNetwork, privileged containers, or capability escalation.
Source: Apache Advisory, GitHub Commit
Actions:
Summary: Argo CD v2.11.0–v3.6.0-rc2 has command injection in SSH Git proxy handling, allowing credential theft via crafted proxy URLs.
Affected Features / Interoperability: Argo CD repo-server, SSH Git proxy, credential management. Could expose Git, Helm, and OCI credentials.
Source: GitHub Releases, GitHub PR
Actions:
Summary: Traefik v3.7.0–v3.7.6 uses backend Service namespace for HTTPRoute extensionRef resolution, enabling unauthorized middleware injection.
Affected Features / Interoperability: Gateway API provider, HTTPRoute, middleware binding. Could inject trusted headers into downstream requests.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Traefik v3.6.0–v3.7.6 fails to enforce crossProviderNamespaces for IngressRouteTCP serversTransport, allowing mTLS credential injection.
Affected Features / Interoperability: IngressRouteTCP, TCP serversTransport, mTLS configuration. Could expose client certificates and SPIFFE identities.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Contrast v1.0.0–v1.17.0 is vulnerable to AML injection in ACPI tables, enabling guest kernel RCE via malicious host-controlled tables.
Affected Features / Interoperability: OVMF firmware, ACPI/AML interpreter, confidential computing guest kernel. Could compromise guest memory and data integrity.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Contrast v1.0.0–v1.18.0 has a CopyFile policy flaw allowing arbitrary guest filesystem writes via Kata agent VSOCK.
Affected Features / Interoperability: Kata agent policies, guest filesystem, VSOCK communication. Could enable full guest takeover.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Crawl4AI v0.7.0 and earlier allows unauthenticated RCE via Python `exec()` in the `/crawl` endpoint’s `hooks` parameter.
Affected Features / Interoperability: Docker API, Python execution, server-side code. Could enable full server compromise and lateral movement.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: openPDC Docker image contains a hardcoded admin credential with no forced change, enabling full administrative access.
Affected Features / Interoperability: openPDC management interface, administrative credentials. Could allow unauthorized control of the application.
Source: CISA Advisory, CSAF
Actions:
Summary: Crawl4AI v0.7.0 and earlier allows unauthenticated LFI via `file://` URLs in multiple endpoints, exposing sensitive files.
Affected Features / Interoperability: Docker API, file access, server filesystem. Could expose `/etc/passwd`, credentials, and environment variables.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Grav v2.0.3 and earlier allows case-sensitive bypass of `.htaccess` rules on case-insensitive filesystems, exposing sensitive files.
Affected Features / Interoperability: Grav CMS, `.htaccess` configuration, file access. Could expose API keys and credentials via uppercase extensions.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Malcolm’s FilePond PHP server allows arbitrary URL fetching via `curl`, enabling read access to external resources.
Affected Features / Interoperability: FilePond server, `curl` integration, upload processing. Could expose internal resources via crafted URLs.
Source: GitHub Advisory, CSAF
Actions:
Summary: Malcolm’s upload pipeline fails to apply compression limits to single-stream formats, enabling gzip bombs.
Affected Features / Interoperability: Upload processing, disk space, OpenSearch/Logstash/Zeek. Could exhaust shared Docker volumes.
Source: GitHub Advisory, CSAF
Actions:
Summary: Renovate v42.68.1–v43.4.4 exposes all environment variables to child processes, risking secret exfiltration.
Affected Features / Interoperability: Renovate Docker images, child process execution, environment variables. Could leak secrets to npm/post-upgrade scripts.
Source: GitHub Advisory, VulnCheck
Actions:
Summary: Katello’s Docker Tags API fails to enforce organization scoping, allowing cross-org metadata disclosure.
Affected Features / Interoperability: Katello Docker API, organization permissions. Could expose repository configurations across orgs.
Source: Red Hat CVE, Bugzilla
Actions:
Summary: Contrast v1.9.0 and earlier allows host-controlled volume mounts in confidential containers, compromising directory integrity.
Affected Features / Interoperability: Contrast volume handling, containerd mounts, OCI image configuration. Could enable arbitrary file writes in containers.
Source: GitHub Advisory, VulnCheck
Actions: