Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Flink Kubernetes Operator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-40564 Public exploit

    Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes Operator

    Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so that it points to user-owned files or addresses.  This lets a u…

    Apache Software Foundation Apache Flink Kubernetes Operator