---
id: "CVE-2026-123665"
page: "https://infrastack.ai/live/CVE-2026-123665"
kind: "vulnerability"
aliases: ["CVE-2026-123665"]
title: "Kubescape: output file argument manipulation causes permission issues locally"
severity: "low"
cvss: 2.8
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["ci", "kubernetes", "kubescape", "package"]
not_affected_if: ["single-trusted-user", "version-4.0.16-or-later"]
published_at: "2026-11-06T15:17:20+00:00"
first_seen_at: "2026-11-06T15:42:44+00:00"
updated_at: "2026-11-06T15:44:37+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123665", "first_seen_at": "2026-11-06T15:42:44+00:00"}]
exploit_sources: []
---

# Kubescape: output file argument manipulation causes permission issues locally

Link for people: https://infrastack.ai/live/CVE-2026-123665 (this .md is for agents)

Kubescape up to 4.0.15 mishandles the outputFile argument in its result printer, so a manipulated value can lead to permission problems. An attacker needs local access to exploit it.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version with `kubescape version`
- Versions up to `4.0.15` are affected

## Fix

- Kubescape: upgrade to `4.0.16`

## Timeline

- 2026-11-06T15:42:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123665

## Documents

- [fix] Patch: github.com https://github.com/kubescape/kubescape/commit/d90f77314c7d4f2b53cf2425844bde2315bd26d2
- [fix] Release notes: github.com https://github.com/kubescape/kubescape/releases/tag/v4.0.16

## From the sources

A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_