Skip to content
OpenAdvisories

Vendor

aiven

5 known vulnerabilities.

Products

aiven-extras 2 aiven-db-migrate 2 aiven-operator 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-39961

    Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource

    Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — pro…

    aiven aiven-operator github.com/aiven/aiven-operator Go