Kube-logging vulnerabilities
We track 2 vulnerabilities in Kube-logging products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.
2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score
Latest Kube-logging vulnerabilities
- 9.9 Critical severity
logging-operator: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow record_transformer.records va
- 8.8 High severity
logging_operator: Incorrect Default Permissions
Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.