Skip to content
OpenAdvisories

Vendor

prowler-cloud

4 known vulnerabilities.

Products

prowler 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-73263

    Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path

    Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig_content containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfig_contains_exec_auth in api/src/backend/…

    prowler-cloud prowler
  • Critical 9.6
    CVE-2026-59151

    Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

    Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token, and the ACS finish logic in api/src/backend/api/v1/views.p…

    prowler-cloud prowler