kubetail-org github.com/kubetail-org/kubetail/modules/cli vulnerabilities

Latest kubetail-org github.com/kubetail-org/kubetail/modules/cli CVEs

Newest publication first

1. CVE-2026-44514 Kubetail: Cross-Site WebSocket Hijacking allows attacker to read Kubernetes logs from authenticated users

   Published 2026-05-14

   Medium·CVSS 6.5 EPSS 0.17%

   Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A malicious web page visited by a user with an active Kubetail session could open...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.