Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-50151

  CVE-2026-50151: oras-go Credential Leak via Unvalidated Location Header in Blob Upload

  A malicious OCI registry can redirect oras-go's blob upload to an attacker-controlled server and steal the caller's registry credentials by returning a cross-host Location header.

• highCVE-2026-49998

  CVE-2026-49998: Centrifugo Cross-Issuer JWT Authentication Bypass via JWKS Kid Cache Collision

  In Centrifugo's multi-tenant dynamic JWKS setup, a valid token for one tenant can silently authenticate as a completely different tenant because the key cache is keyed only by kid, not by which JWKS…

• highCVE-2026-41053

  CVE-2026-41053: Rancher GitHub App Auth Over-Inclusive Team Membership Expansion

  A logic bug in Rancher's GitHub App authentication provider gives any org member the group permissions of every team in the organization, not just the teams they actually belong to.

• criticalCVE-2026-41052

  CVE-2026-41052: Rancher Project Owner Privilege Escalation to Host

  A Rancher user with Project Owner access can relabel a namespace to use the 'privileged' Pod Security Admission profile, then deploy containers that break out of standard isolation and reach…

• criticalCVE-2026-49457

  CVE-2026-49457: erlang/quic Broken TLS Certificate Verification (MITM)

  Every erlang/quic client connection before version 1.4.4 skipped all three TLS server authentication checks, letting any attacker on the network path impersonate any server by presenting an…

• highCVE-2026-44938

  CVE-2026-44938: Rancher Fleet Pod Security Standards Bypass via namespaceLabels

  Anyone with git push access to a Fleet-monitored repository could silently downgrade the Pod Security Standards level on a Kubernetes namespace, letting them deploy privileged or otherwise…

• highCVE-2026-44937

  CVE-2026-44937: Rancher Fleet Unauthenticated Webhook Regex Injection via Unsanitized Repository URL

  When Fleet's webhook endpoint runs without a shared secret, an attacker can send a forged webhook request containing regex metacharacters in the repository URL or path field, causing Fleet to match…

• criticalCVE-2026-44935

  CVE-2026-44935: Rancher Fleet Cross-Namespace Secret Disclosure via Unvalidated valuesFrom

  A flaw in Rancher Fleet lets any tenant read Kubernetes secrets from other namespaces on a shared downstream cluster, by pointing the valuesFrom field in a fleet.yaml or HelmOp resource at an…

• highCVE-2026-48815

  CVE-2026-48815: sigstore certificateOIDs Verification Constraint Silently Dropped

  The sigstore npm package accepts a certificateOIDs option to restrict which signing certificates are trusted, but silently discards those constraints before verification, so any certificate that…

• high

  SurrealDB HTTP RPC Session Race Condition Allows Privilege Escalation

  A race condition in SurrealDB's HTTP /rpc endpoint lets an unauthenticated attacker inherit an active authenticated user's session and execute queries with their privileges, including potential root…

• highCVE-2022-43467

  CVE-2022-43467: Open Babel PQS Parser Out-of-Bounds Write

  A crafted PQS chemistry file can overflow a fixed-size stack buffer in Open Babel's parser, enabling arbitrary code execution in any application that opens untrusted chemical files.

• highCVE-2026-49981

  CVE-2026-49981: Twig Sandbox Filter/Tag/Function Allow-list Bypass via Cached Template

  Twig's sandbox allow-list for filters, tags, and functions can be silently skipped when a template is loaded before sandboxing is active, letting untrusted templates call anything they want…