Skip to content
OpenAdvisories
High · 8.1 CVE-2026-18544 EUVD-2026-62851GHSA-q4gw-3xwf-fpcw

Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference

Published Aug 19, 2026 · Updated Aug 21, 2026 · Assigned by ibm

Description

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references.

Affected products

VendorProductAffectedFixed
IBM Portieris 0.5.0 – ≤ 0.14.2 —

References