CVE-2026-62440

Published: Ago 21, 2026 Last Modified: Ago 21, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes.

This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0.

Users are recommended to upgrade to version 4.22.1.1 or later, which fixes the issue.

284

Improper Access Control

Incomplete
Abstraction: Pillar Structure: Simple
Common Consequences
Security Scopes Affected:
Other
Potential Impacts:
Varies By Context
Applicable Platforms
Technologies: Not Technology-Specific, ICS/OT, Web Based
View CWE Details
https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzf…
https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbc