What’s Vulnerable › Products

clastix kamaji vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your clastix kamaji version is affected

Latest clastix kamaji vulnerabilities

• CVE-2026-62845 — Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers (CVSS 4.7)
• CVE-2026-62246 — Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolation (CVSS 8.5)
• CVE-2024-42480 — Kamaji's RBAC Roles for `etcd` are not disjunct (CVSS 9.9)