Skip to content
OpenAdvisories

Package · Go

github.com/zxh326/kite

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.3
    CVE-2026-53487

    Kite has an authenticated cluster RBAC bypass in /api/v1/overview

    Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request `/api/v1/overview` for a cluster that their roles do not permit by selecting that cluster with `x-cluster-name`. The overview route is registered befor…

    kite-org kite github.com/zxh326/kite Go
  • Medium 6.5
    GHSA-c534-2w9c-x7fm

    Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources

    ## Summary Kite versions 0.6.9 through 0.14.0 authorize Kubernetes proxy requests against the pod or service identified by the original route parameters. Encoded path traversal segments can cause the upstream URL to resolve to a different Kubernetes API endpo…

    github.com/zxh326/kite Go