fluid-cloudnative github.com/fluid-cloudnative/fluid vulnerabilities

Latest fluid-cloudnative github.com/fluid-cloudnative/fluid CVEs

Newest publication first

1. CVE-2023-51699 OS Command Injection for Fluid Users with JuicefsRuntime

   Published 2024-03-15

   Medium·CVSS 6.0 EPSS 0.61%

   Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRuntime can potentially allow an authenticated user, who has the authority to create...

2. CVE-2023-30840 On a compromised node, the fluid-csi service account can be used to modify node specs

   Published 2023-05-08

   High·CVSS 7.8 EPSS 0.24%

   Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0 and prior to version 0.8.6, if a malicious user gains control of a Kubernetes node running fluid csi pod (controlled by the csi-no...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.