kubesphere.io vulnerabilities

Products

• kubesphere.io/kubesphere 1

Latest kubesphere.io CVEs

Newest publication first

1. CVE-2026-91923 KubeSphere through 4.1.3 SSRF via git credential verification endpoint

   Published 2026-09-15

   High·CVSS 8.3 EPSS 0.45%

   KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attackers can supply arbitrary URLs to reach internal services and...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.