Skip to content

CVE-2026-6389

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-6389. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • OperTraitor — Kubernetes Operator RBAC Privilege-Escalation Scanner
    article2026-09-30

    Affects IBM Prometurbo operator (used with IBM Turbonomic); cluster-wide permission to get, list, and watch Kubernetes Secrets, allowing a compromised operator to access sensitive data from unrelated namespaces (service account tokens, database credentials, API keys, TLS certificates). CVSS 8.8 High

  • OperTraitors: How Kubernetes Operators Betray Your Security Posture
    article2026-09-29It is written here as CVE-2026-6389 (High, CVSS 8.8/10; excessive cluster-wide secrets access in IBM Prometurbo operator, part of Turbonomic; IBM security bulletin published April 24, 2026).

    High, CVSS 8.8/10; excessive cluster-wide secrets access in IBM Prometurbo operator, part of Turbonomic; IBM security bulletin published April 24, 2026

All cves in this workspace.