{"id":"CVE-2026-123665","kind":"vulnerability","aliases":["CVE-2026-123665"],"related":[],"title":"Kubescape: output file argument manipulation causes permission issues locally","description":"A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised.","summary":"Kubescape up to 4.0.15 mishandles the outputFile argument in its result printer, so a manipulated value can lead to permission problems. An attacker needs local access to exploit it.","severity":"low","cvss":2.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ci","kubernetes","kubescape","package"],"not_affected_if":["single-trusted-user","version-4.0.16-or-later"],"how_to_check":"- Check the installed version with `kubescape version`\n- Versions up to `4.0.15` are affected","fix":"- Kubescape: upgrade to `4.0.16`","status":"open","published_at":"2026-11-06T15:17:20+00:00","first_seen_at":"2026-11-06T15:42:44+00:00","triaged_at":"2026-11-06T15:44:37+00:00","updated_at":"2026-11-06T15:44:37+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-06T15:44:37Z","model":"claude-haiku-5-5","output":{"fix":"- Kubescape: upgrade to `4.0.16`","reach":"local","title":"Kubescape: output file argument manipulation causes permission issues locally","impact":"low","summary":"Kubescape up to 4.0.15 mishandles the outputFile argument in its result printer, so a manipulated value can lead to permission problems. An attacker needs local access to exploit it.","audience":"businesses","category":"package","nicknames":[],"who_cares":["kubescape","kubernetes","ci"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"local users may cause file permission changes on the host","analyst_note":"","how_to_check":"- Check the installed version with `kubescape version`\n- Versions up to `4.0.15` are affected","plain_action":"","needs_analyst":false,"not_affected_if":["version-4.0.16-or-later","single-trusted-user"],"who_is_affected":"Teams that run the Kubescape CLI or scanner on shared machines or CI runners where other users can influence the output file argument. Systems where only trusted users run Kubescape locally are at low risk. The sources do not describe a remote path.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000649,"input_tokens":4298,"output_tokens":439,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-123665':12A,15A '-2026':11A,14A '4.0.15':23B,57C '4.0.16':91C 'access':45B,87C 'address':95C 'advis':108C 'affect':105C 'argument':4A,27B,76C 'attack':42B,84C 'call':101C 'caus':6A 'ci':16B 'compon':69C,106C 'core/pkg/resultshandling/printer/printresults.go':66C 'cve':10A,13A 'd90f77314c7d4f2b53cf2425844bde2315bd26d2':102C 'execut':71C 'exploit':47B 'file':3A,65C 'function':61C 'getwrit':62C 'identifi':52C 'impact':58C 'issu':8A,82C,97C 'kubernet':17B 'kubescap':1A,18B,20B,54C 'lead':37B,79C 'local':9A,44B,86C 'manipul':5A,34B,73C 'mishandl':24B 'need':43B 'output':2A,70C 'outputfil':26B,77C 'packag':19B 'patch':99C 'permiss':7A,39B,81C 'printer':31B 'problem':40B 'recommend':93C 'requir':85C 'result':30B 'upgrad':88C,103C 'valu':35B 'version':90C 'weak':49C","nicknames":[],"mitigations":[],"who_affected":"Teams that run the Kubescape CLI or scanner on shared machines or CI runners where other users can influence the output file argument. Systems where only trusted users run Kubescape locally are at low risk. The sources do not describe a remote path.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ci","kubernetes","kubescape","low","package"],"campaign_type":null,"search_a":"'-123665':12A,15A '-2026':11A,14A 'argument':4A 'caus':6A 'cve':10A,13A 'file':3A 'issu':8A 'kubescap':1A 'local':9A 'manipul':5A 'output':2A 'permiss':7A","search_b":"'4.0.15':23B 'access':45B 'argument':27B 'attack':42B 'ci':16B 'exploit':47B 'kubernet':17B 'kubescap':18B,20B 'lead':37B 'local':44B 'manipul':34B 'mishandl':24B 'need':43B 'outputfil':26B 'packag':19B 'permiss':39B 'printer':31B 'problem':40B 'result':30B 'valu':35B","search_c":"'4.0.15':57C '4.0.16':91C 'access':87C 'address':95C 'advis':108C 'affect':105C 'argument':76C 'attack':84C 'call':101C 'compon':69C,106C 'core/pkg/resultshandling/printer/printresults.go':66C 'd90f77314c7d4f2b53cf2425844bde2315bd26d2':102C 'execut':71C 'file':65C 'function':61C 'getwrit':62C 'identifi':52C 'impact':58C 'issu':82C,97C 'kubescap':54C 'lead':79C 'local':86C 'manipul':73C 'output':70C 'outputfil':77C 'patch':99C 'permiss':81C 'recommend':93C 'requir':85C 'upgrad':88C,103C 'version':90C 'weak':49C","first_public_at":"2026-11-06T15:17:20+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123665","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123665","severity":null,"published_at":"2026-11-06T15:17:20+00:00","modified_at":"2026-11-06T15:17:20+00:00","first_seen_at":"2026-11-06T15:42:44+00:00","fetched_at":"2026-11-06T15:42:44+00:00","note":null}],"documents":[{"id":87585,"url":"https://github.com/kubescape/kubescape/commit/d90f77314c7d4f2b53cf2425844bde2315bd26d2","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":87586,"url":"https://github.com/kubescape/kubescape/releases/tag/v4.0.16","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}