meshery vulnerabilities

Products

• github.com/meshery/meshery 4

Latest meshery CVEs

Newest publication first

1. CVE-2026-65919 Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownload

   Published 2026-07-23

   High·CVSS 8.7 EPSS 2.1%

   Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api/system/fileDownload endpoints that pass user-supplied file parameters directly to os.Open without path validation. Attackers can supply absolute paths or trave...

2. CVE-2024-35182 GHSL-2024-014 Meshery SQL Injection vulnerability

   Published 2024-05-27

   High·CVSS 8.1 EPSS 1.6%

   Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.22 may lead to arbitrary file write by using a SQL injection stacked queries p...

3. CVE-2024-35181 GHSL-2024-013 Meshery SQL Injection vulnerability

   Published 2024-05-27

   High·CVSS 8.1 EPSS 1.6%

   Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.22 may lead to arbitrary file write by using a SQL injection stacked queries p...

4. CVE-2024-29031 Meshery SQL Injection vulnerability

   Published 2024-03-21

   High·CVSS 7.5 EPSS 0.96%

   Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.17 allows a remote attacker to obtain sensitive information via the order para...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.