Eclipse Ankaios vulnerabilities

2 known vulnerabilities in Eclipse Ankaios from Eclipse Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Eclipse Ankaios: Incorrect Default Permissions

  CVE-2026-86836Sep 14, 2026Eclipse Foundation

  In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived from the agent name and a hash of the workload's runtime configuration. If a directory or FIFO already

• 8.3 High severity

  Eclipse Ankaios: Incorrect Authorization

  CVE-2026-84173Sep 7, 2026Eclipse Foundation

  In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rules whose first path segment is a wildcard. An authenticated workload with access restricted by such a rule can submit a