Telepresenceio vulnerabilities
We track 2 vulnerabilities in Telepresenceio products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest Telepresenceio vulnerabilities
- 8.5 High severity
telepresence: Missing Authentication for Critical Functionality
Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-network callers, ArriveAsClient stores a caller-supplied Namespace using only th
- 8.2 High severity
telepresence: Authorization Bypass Through User-Controlled Key
Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager Tunnel gRPC streaming endpoint parses a session ID from the first bytes of a caller-controlled message in pkg/tunnel/message.go and pa