kamaji vulnerabilities

2 known vulnerabilities in kamaji from Clastix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  kamaji: Improper Access Control

  CVE-2026-62246Jul 30, 2026Clastix

  Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema, database user, and etcd key prefix from a lossy namespace-and-name normalization in GetDefaultDatastoreSchema() and GetDefaul

• 9.9 Critical severity

  kamaji: Improper Access Control

  CVE-2024-42480Aug 12, 2024Clastix

  Kamaji is the Hosted Control Plane Manager for Kubernetes. In versions 1.0.0 and earlier, Kamaji uses an "open at the top" range definition in RBAC for etcd roles leading to some TCPs API servers being able to read, write, and delete the data of other control