Skip to content

Vendor

sealos vulnerabilities

2 published CVES affecting sealos, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of sealos alerts

Products

Latest sealos CVEs

Newest publication first

  1. CVE-2023-36815 Sealos billing system permission control defect

    Published
    HighCVSS 8.1 EPSS 0.55%

    Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account sealos[.] io/v1/Payment, resulting in the ability t...

  2. CVE-2023-33190 Improperly configured permissions in Sealos

    Published
    CriticalCVSS 9.8 EPSS 0.71%

    Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluster control permissions...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.