9.1

CVE-2026-39429

Exploit

kcp's cache server is accessible without authentication or authorization checks

kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.30.3 and 0.29.3, the cache server is directly exposed by the root shard and has no authentication or authorization in place. This allows anyone who can access the root shard to read and write to the cache server. This vulnerability is fixed in 0.30.3 and 0.29.3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kcp ≫ Kcp Version < 0.29.3
Kcp ≫ Kcp Version >= 0.30.0 < 0.30.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.44% 0.346
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
security-advisories@github.com 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE-302 Authentication Bypass by Assumed-Immutable Data

The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://github.com/kcp-dev/kcp/security/advisories/GHSA-3j3q-wp9x-585p
Vendor Advisory
Exploit
Mitigation
https://github.com/kcp-dev/kcp/releases/tag/v0.29.3
Release Notes
https://github.com/kcp-dev/kcp/releases/tag/v0.30.3
Release Notes