Vulnerabilities in clastix
5 resultsCVE-2022-23652HIGHPrivilege escalation using hop-by-hop Connection headerEPSS 1.4%CVE-2022-46167HIGHCapsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant NamespaceEPSS 1.0%CVE-2024-42480HIGHKamaji's RBAC Roles for `etcd` are not disjunctEPSS 0.6%CVE-2026-62246HIGHKamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolationEPSS 0.4%CVE-2026-62845MEDIUMKamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL driversEPSS 0.3%