Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema, database user, and etcd key prefix from a lossy namespace-and-name normalization in GetDefaultDatastoreSchema() and GetDefaultDatastoreUsername(), allowing distinct tenants with colliding normalized identifiers to share control-plane state and read, modify, or destroy another tenant's Kubernetes data. This issue is fixed in version 26.7.4-edge.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-16 | 1 | Patch1 |
| 2026-08-02 | 1 | Patch1 |
| 2026-09-12 | 1 | General1 |
Our CTO @tranchitellad shares how CLASTIX handled #CVE-2026-62246, and what proactive maintainer support means for organizations running #Kamaji in production. https://clastix.io/post/ahead-of-disclosure-kamaji-cve-support-and-the-cra/
Post summary
The post discusses CLASTIX’s responsive patching and maintainer support for CVE‑2026‑62246, focusing on the protection offered to Kamaji users.
CVE-2026-62246: Kamaji Tenant Isolation Failure - What It Means for Your Business and How to Respond https://hubs.li/Q04xjKn80
Post summary
The snippet references a new CVE for Kamaji tenant isolation failure, indicating a potential security issue and suggesting that readers should learn how to respond, but no specific details or mitigations are provided.
CVE-2026-62246 - Kamaji tenant isolation bypass. Lossy name normalization lets tenants read, modify, or destroy other tenants' Kubernetes data. CVSS 8.5. Update to 26.7.4-edge immediately. #CVE #Kubernetes #infosec #devsecops #devops #developer #sysadmin #infosec #cybersecurityawareness #docker #linux #kali #cybersecuritynews #cybersecuritytips #developers #cvealert #hacker #hackers https://www.valtersit.com/cve/CVE-2026-62246
Post summary
The tweet highlights CVE‑2026‑62246, a Kamaji tenant isolation bypass with a CVSS of 8.5, and urges users to immediately upgrade to version 26.7.4‑edge.