CVE Daily – Google Kubernetes Engine https://cvedaily.com/pages/tags/google-kubernetes-engine.html CVE Daily – Google Kubernetes Engine en Wed, 03 Jun 2026 21:26:56 +0000 [Critical] CVE-2026-4810 – A Code Injection and Missing Authentication vulnerability in Google Agent Develo... https://nvd.nist.gov/vuln/detail/CVE-2026-4810 https://nvd.nist.gov/vuln/detail/CVE-2026-4810 Mon, 13 Apr 2026 09:16:08 +0000 Critical CVE-2026-4810

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.0a1) through 1.28.1 (and 2.0.0a2) on Python (OSS), Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance. This vulnerability was patched in versions 1.28.1 and 2.0.0a2. Customers need to redeploy the upgr…

CVSS: 9.3 · CWE: CWE-306

View on NVD

]]> [Medium] CVE-2026-33726 – Cilium is a networking, observability, and security solution with an eBPF-based ... https://nvd.nist.gov/vuln/detail/CVE-2026-33726 https://nvd.nist.gov/vuln/detail/CVE-2026-33726 Fri, 27 Mar 2026 01:16:20 +0000 Medium CVE-2026-33726

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced for traffic from pods to L7 Services (Envoy, GAMMA) with a local backend on the same node, when Per-Endpoint Routing is enabled and BPF Host Routing is disabled. Per-Endpoint Routing is disabled by default, but is autom…

CVSS: 5.4 · CWE: CWE-284

View on NVD

]]> [High] CVE-2020-2121 – Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its... https://nvd.nist.gov/vuln/detail/CVE-2020-2121 https://nvd.nist.gov/vuln/detail/CVE-2020-2121 Wed, 12 Feb 2020 15:15:13 +0000 High CVE-2020-2121

Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2019-10445 – A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and ... https://nvd.nist.gov/vuln/detail/CVE-2019-10445 https://nvd.nist.gov/vuln/detail/CVE-2019-10445 Wed, 16 Oct 2019 14:15:12 +0000 Medium CVE-2019-10445

A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited information about the scope of a credential with an attacker-specified credentials ID.

CVSS: 4.3 · CWE: CWE-862

View on NVD

]]> [Medium] CVE-2019-10365 – Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary fi... https://nvd.nist.gov/vuln/detail/CVE-2019-10365 https://nvd.nist.gov/vuln/detail/CVE-2019-10365 Wed, 31 Jul 2019 13:15:13 +0000 Medium CVE-2019-10365

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.

CVSS: 4.3 · CWE: CWE-668

View on NVD

]]>