Skip to content
OpenAdvisories

Vendor

OpenKruise

3 known vulnerabilities.

Products

kruise 2 kruise-manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-120656

    CVE-2026-120656

    OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any pod on the cluster network.

    OpenKruise kruise-manager