CVE-2026-123665
Deferred Deferred - Pending Action

Permission Issue in Kubescape via OutputFile Manipulation

Publication date: 2026-11-06

Last updated on: 2026-11-06

Assigner: VulDB

Description
A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-06
Last Modified
2026-11-06
Generated
2026-11-06
EPSS Evaluated
N/A
NVD
CVE-2026-123665
EUVD
EUVD-2026-118274

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
kubescape kubescape to 4.0.15 (inc)
kubescape kubescape 4.0.16

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-275 Permission Issues
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
AI Quick Actions have not been generated yet.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-123665. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...