CVE-2026-10609

Go/github.com/openshift/cluster-logging-operator CVE-2026-10609: medium 6.8, EPSS 0.38%

OpenShift Cluster Logging Operator missing authorization flaw

Action: Upgrade github.com/openshift/cluster-logging-operator to 0.0.0-20260804174055-1864c2a9851d or later.

go get github.com/openshift/cluster-logging-operator@v0.0.0-20260804174055-1864c2a9851d

Affected

Fixed versions

Sources

• osv: GHSA-9xm2-gw56-wj7m
• https://nvd.nist.gov/vuln/detail/CVE-2026-10609
• https://github.com/openshift/cluster-logging-operator/pull/3383
• https://github.com/openshift/cluster-logging-operator/commit/1864c2a9851da90a3956f1b83c5f31b3b76e3514
• https://access.redhat.com/security/cve/CVE-2026-10609
• https://bugzilla.redhat.com/show_bug.cgi?id=2483943
• https://github.com/openshift/cluster-logging-operator

CVE-2026-10609 · published 2026-06-23T15:32:37Z · modified 2026-10-01T20:56:03.504623269Z · JSON

Go/github.com/openshift/cluster-logging-operator CVE-2026-10609: unknown, EPSS 0.38%

OpenShift Cluster Logging Operator missing authorization flaw in github.com/openshift/cluster-logging-operator

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6590
• https://github.com/advisories/GHSA-9xm2-gw56-wj7m
• https://nvd.nist.gov/vuln/detail/CVE-2026-10609
• https://github.com/openshift/cluster-logging-operator/commit/1864c2a9851da90a3956f1b83c5f31b3b76e3514
• https://github.com/openshift/cluster-logging-operator/pull/3383
• https://access.redhat.com/security/cve/CVE-2026-10609
• https://bugzilla.redhat.com/show_bug.cgi?id=2483943

CVE-2026-10609 · published 2026-10-01T20:23:38Z · modified 2026-10-01T20:45:15.934222442Z · JSON