Meshery vulnerabilities
We track 4 vulnerabilities in Meshery products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 23, 2026.
Latest Meshery vulnerabilities
- 7.5 High severity
meshery: Improper Limitation of a Pathname to a Restricted Directory
Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api/system/fileDownload endpoints that pass user-supplied file parameters directly to os.Open without path validation. Attackers can supply abs
- 8.1 High severity
meshery: Improper Neutralization of Special Elements used in an SQL Command
Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.22 may lead to arbitrary file write by using a SQL injecti
- 8.1 High severity
meshery: Improper Neutralization of Special Elements used in an SQL Command
Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.22 may lead to arbitrary file write by using a SQL injecti
- 7.5 High severity
meshery: Improper Neutralization of Special Elements used in an SQL Command
Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.17 allows a remote attacker to obtain sensitive informatio