Go/github.com/kubewarden/kubewarden-controller CVE-2026-42541: medium 4.3, EPSS 0.27%

Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call

Action: Upgrade github.com/kubewarden/kubewarden-controller to 1.35.0 or later.

go get github.com/kubewarden/kubewarden-controller@v1.35.0

Affected

Fixed versions

Sources

• osv: GHSA-wqcw-g35j-j578
• https://github.com/kubewarden/adm-controller/security/advisories/GHSA-wqcw-g35j-j578
• https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-wqcw-g35j-j578
• https://nvd.nist.gov/vuln/detail/CVE-2026-42541
• https://github.com/kubewarden/docs/pull/737
• https://github.com/kubewarden/kubewarden-controller/pull/1693
• https://docs.kubewarden.io/howtos/policy-servers/namespaced-policies-capabilities
• https://github.com/kubewarden/kubewarden-controller

CVE-2026-42541 · published 2026-05-05T21:49:03Z · modified 2026-06-25T23:11:10.020551982Z · JSON