telepresence vulnerabilities

2 known vulnerabilities in telepresence from Telepresenceio. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  telepresence: Missing Authentication for Critical Functionality

  CVE-2026-102340Nov 4, 2026Telepresenceio

  Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-network callers, ArriveAsClient stores a caller-supplied Namespace using only th

• 8.2 High severity

  telepresence: Authorization Bypass Through User-Controlled Key

  CVE-2026-102339Nov 4, 2026Telepresenceio

  Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager Tunnel gRPC streaming endpoint parses a session ID from the first bytes of a caller-controlled message in pkg/tunnel/message.go and pa