Skip to content
OpenAdvisories

Package · Go

github.com/aiven/aiven-operator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-39961

    Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource

    Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — pro…

    aiven aiven-operator github.com/aiven/aiven-operator Go