Skip to content
OpenAdvisories

Package · Go

github.com/kube-logging/logging-operator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-54680

    Logging operator has Fluentd configuration injection that allows remote code execution

    Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow record_transformer.records v…

    kube-logging logging-operator github.com/kube-logging/logging-operator Go