CVE-2026-109797
|
| |
|
|
Software afectado |
KUBERNETES |
|
|
|
In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox containers because of improper tenant isolation in the legacy Incus sandbox-management API handlers. The affected handlers did not use the tenant-aware session lookup path, allowing cross-tenant container operations such as listing, exposing or proxying, and deleting containers.The issue affects only the legacy Incus backend. Kubernetes and OpenShell deployments are not affected because the relevant Incus-specific handlers are unavailable there. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-109797 |
