—
GO-2026-5716
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller
Quick fix
GO-2026-5716 — github.com/kubewarden/kubewarden-controller: upgrade to the fixed version with the command below.
go get github.com/kubewarden/kubewarden-controller@v1.35.0Details
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/kubewarden/kubewarden-controller
Introduced in:
0Fixed in: 1.35.0Fix
go get github.com/kubewarden/kubewarden-controller@v1.35.0References
- https://github.com/kubewarden/adm-controller/security/advisories/GHSA-wqcw-g35j-j578[ADVISORY]
- https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-wqcw-g35j-j578[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-42541[ADVISORY]
- https://github.com/kubewarden/kubewarden-controller/pull/1693[FIX]
- https://github.com/kubewarden/docs/pull/737[WEB]