Vendor

KubeEdge

2 briefs RSS

KubeEdge keadm Arbitrary File Write via Path Traversal

KubeEdge keadm utility contains a path traversal vulnerability (CVE-2026-62369) in its archive extraction function, allowing an attacker to overwrite arbitrary files on Windows systems during edge node join or installation.

keadm +2 vulnerability file-write path-traversal windows

1c 1h ago

high advisory

Command Injection Vulnerability in KubeEdge NodeUpgradeJob

1 TTP 1 CVE

An authenticated remote code execution vulnerability (CVE-2026-62371) in the KubeEdge v1alpha2 API allows attackers to inject shell commands via the NodeUpgradeJob resource.

KubeEdge +1 vulnerability rce cloud-native

1t 1c 1h ago