CyberSecBulletin

Sealos vulnerabilities

We track 2 vulnerabilities in Sealos products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 3, 2023.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Sealos vulnerabilities

  • 8.1 High severity

    sealos: Missing Authorization

    CVE-2023-36815Labring

    Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account `sealos[.] io/v1/Payment`, resu

  • 9.8 Critical severity

    sealos: Incorrect Authorization

    CVE-2023-33190Labring

    Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluster