← Volver a CVEs

CVE-2026-32254

HIGH

7.1

Descripcion

Kube-router is a turnkey solution for Kubernetes networking. Prior to version 2.8.0, Kube-router's proxy module does not validate externalIPs or loadBalancer IPs before programming them into the node's network configuration. Version 2.8.0 contains a patch for the issue. Available workarounds include enabling DenyServiceExternalIPs feature gate, deploying admission policy, restricting service creation RBAC, monitoring service changes, and applying BGP prefix filtering.

Detalles CVE

Puntuacion CVSS v3.17.1

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado3/18/2026

Ultima modificacion3/19/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

kube-router:kube-router

Debilidades (CWE)

CWE-284

Referencias

https://github.com/cloudnativelabs/kube-router/commit/a1f0b2eea3ee0f66b9a5b5c49dcb714619ccd456(security-advisories@github.com)

https://github.com/cloudnativelabs/kube-router/releases/tag/v2.8.0(security-advisories@github.com)

https://github.com/cloudnativelabs/kube-router/security/advisories/GHSA-phqm-jgc3-qf8g(security-advisories@github.com)

https://github.com/cloudnativelabs/kube-router/security/advisories/GHSA-phqm-jgc3-qf8g(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.