Live › vulnerability › CVE-2026-10609
Go to dashboardThe OpenShift Cluster Logging Operator Go module has a missing authorization check. The sources do not say what an attacker can access or change once the check is bypassed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:13 UTC, 0h before NVD. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| github.com/openshift/cluster-logging-operator | go | all versions | – |
Unknown from the sources.
Update github.com/openshift/cluster-logging-operator to v0.0.0-20260804174055-1864c2a9851d or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
OpenShift Cluster Logging Operator missing authorization flaw in github.com/openshift/cluster-logging-operator.
NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.
(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)
The additional affected modules and versions are: github.com/openshift/cluster-logging-operator before v0.0.0-20260804174055-1864c2a9851d.
This page as .md · .json · in your agent: get_signal("CVE-2026-10609")
Go Vulnerability Database, CC-BY 4.0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.