Kebev2v vulnerabilities
We track 3 vulnerabilities in Kebev2v products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2026.
Latest Kebev2v vulnerabilities
- 7.7 High severity
Migration Assessment: Authorization Bypass Through User-Controlled Key
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens (JWTs) for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the source_id claim within these tokens against the requested sou
- 8.1 High severity
Migration Assessment: Authorization Bypass Through User-Controlled Key
A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the `/api/v1/sources/{id}/image-url` endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs fo
- 8.1 High severity
Migration Assessment: Missing Authentication for Critical Functionality
A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, includin