CVE-2026-62440

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.22.1.1 or later, which fixes the issue.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbc	Mailing List Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*

History

16 Oct 2026, 15:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de control de acceso inadecuado en el plugin de Kubernetes Service (CKS) de Apache CloudStack, permitiendo la manipulación entre inquilinos del clúster de Kubernetes mientras se añaden y eliminan nodos. Este problema afecta a Apache CloudStack: desde la versión 4.21.0.0 hasta la 4.22.1.0. Se recomienda a los usuarios actualizar a la versión 4.22.1.1 o posterior, que corrige el problema.

Information

Published : 2026-08-21 09:16

Updated : 2026-10-16 15:10

NVD link : CVE-2026-62440

Mitre link : CVE-2026-62440

CVE.ORG link : CVE-2026-62440

JSON object : View

Products Affected

apache

cloudstack

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-62440", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-62440", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-25T19:19:51.942736Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@apache.org", "affectedData": [{"vendor": "Apache Software Foundation", "product": "Apache CloudStack", "versions": [{"status": "affected", "version": "4.21.0.0", "versionType": "semver", "lessThanOrEqual": "4.22.1.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-21T09:16:39.963", "references": [{"url": "https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbc", "tags": ["Mailing List", "Vendor Advisory"], "source": "security@apache.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes.\n\nThis issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0.\n\nUsers are recommended to upgrade to version 4.22.1.1 or later, which fixes the issue."}, {"lang": "es", "value": "Vulnerabilidad de control de acceso inadecuado en el plugin de Kubernetes Service (CKS) de Apache CloudStack, permitiendo la manipulaci\u00f3n entre inquilinos del cl\u00faster de Kubernetes mientras se a\u00f1aden y eliminan nodos.\n\nEste problema afecta a Apache CloudStack: desde la versi\u00f3n 4.21.0.0 hasta la 4.22.1.0.\n\nSe recomienda a los usuarios actualizar a la versi\u00f3n 4.22.1.1 o posterior, que corrige el problema."}], "lastModified": "2026-10-16T15:10:00.103", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D603F400-5DA6-4A5C-BE58-91F137F8983C", "versionEndExcluding": "4.22.1.1", "versionStartIncluding": "4.21.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}