CVE-2026-27112
2 advisories.
Go/github.com/akuity/kargo CVE-2026-27112: critical, EPSS 0.88%
Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints
Action: Upgrade github.com/akuity/kargo to 1.7.8 or later.
go get github.com/akuity/kargo@v1.9.3go get github.com/akuity/kargo@v1.8.11go get github.com/akuity/kargo@v1.7.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.0-rc.1 | 1.9.3 | - |
| 1.8.0-rc.1 | 1.8.11 | - |
| 1.7.0 | 1.7.8 | - |
Fixed versions
| 1.9.3 | 1.8.11 | 1.7.8 |
Sources
- osv: GHSA-7g9x-cp9g-92mr
- https://github.com/akuity/kargo/security/advisories/GHSA-7g9x-cp9g-92mr
- https://nvd.nist.gov/vuln/detail/CVE-2026-27112
- https://github.com/akuity/kargo/commit/155c6852ffbffa2902f18e6c7add91a846e8d344
- https://github.com/akuity/kargo
CVE-2026-27112 · published · modified · JSON
Go/github.com/akuity/kargo CVE-2026-27112: unknown, EPSS 0.88%
Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints in github.com/akuity/kargo
Action: Upgrade github.com/akuity/kargo to 1.7.8 or later.
go get github.com/akuity/kargo@v1.7.8go get github.com/akuity/kargo@v1.8.11go get github.com/akuity/kargo@v1.9.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.7.8 | - |
| 1.8.0-rc.1 | 1.8.11 | - |
| 1.9.0-rc.1 | 1.9.3 | - |
Fixed versions
| 1.7.8 | 1.8.11 | 1.9.3 |
Sources
- osv: GO-2026-4516
- https://github.com/akuity/kargo/security/advisories/GHSA-7g9x-cp9g-92mr
- https://github.com/akuity/kargo/commit/155c6852ffbffa2902f18e6c7add91a846e8d344
CVE-2026-27112 · published · modified · JSON