Go/github.com/kube-logging/logging-operator CVE-2026-54680: unknown, EPSS 0.78%
Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator
Action: Upgrade github.com/kube-logging/logging-operator to 0.0.0-20260608145523-cf437d7f1e05 or later.
go get github.com/kube-logging/logging-operator@v0.0.0-20260608145523-cf437d7f1e05Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260608145523-cf437d7f1e05 |
Sources
- osv: GO-2026-6142
- https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h
- https://github.com/kube-logging/logging-operator/commit/cf437d7f1e056c78740bf5716ac8bdebcf002425
- https://github.com/kube-logging/logging-operator/releases/tag/6.6.0
CVE-2026-54680 · published · modified · JSON