What’s Vulnerable › Vulnerabilities

CVE-2024-53349

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-21 · updated 2026-06-17
• Weakness: CWE-269

Description

Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the secretes component in the k8s cluster

Affected products

• Linuxfoundation Kuadrant: through 0.11.3

References

• https://gist.github.com/HouqiyuA/2a34c8f95dac7d9d8d7df7732403f383
• https://github.com/Kuadrant/kuadrant-operator
• https://www.cncf.io/projects/kuadrant/

Get alerted when CVE-2024-53349 or the next vulnerability affects your stack