openshift github.com/openshift/cluster-logging-operator vulnerabilities

Latest openshift github.com/openshift/cluster-logging-operator CVEs

Newest publication first

1. CVE-2026-10609 Openshift/cluster-logging-operator: cluster logging operator creates and forwards serviceaccount tokens without verifying clf creator authorization

   Published 2026-06-23

   Medium·CVSS 6.8 EPSS 0.38%

   A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated ed...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.