CVE-2026-102340

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-102340", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-09-28T22:38:42.254Z", "datePublished": "2026-11-04T20:39:55.525Z", "dateUpdated": "2026-11-09T16:58:40.976Z"}, "containers": {"cna": {"title": "Telepresence: Traffic Manager gRPC has no auth \u2014 any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets", "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "lang": "en", "description": "CWE-306: Missing Authentication for Critical Function", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-862", "lang": "en", "description": "CWE-862: Missing Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/telepresenceio/telepresence/security/advisories/GHSA-j8j4-rw65-56r6", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/telepresenceio/telepresence/security/advisories/GHSA-j8j4-rw65-56r6"}, {"name": "https://github.com/telepresenceio/telepresence/pull/4217", "tags": ["x_refsource_MISC"], "url": "https://github.com/telepresenceio/telepresence/pull/4217"}, {"name": "https://github.com/telepresenceio/telepresence/commit/04ec3464fe8878fdc96420cdc8036edefa0dc9ae", "tags": ["x_refsource_MISC"], "url": "https://github.com/telepresenceio/telepresence/commit/04ec3464fe8878fdc96420cdc8036edefa0dc9ae"}, {"name": "https://github.com/telepresenceio/telepresence/commit/36458b65a010d2b316af48cd90e193ba190785d9", "tags": ["x_refsource_MISC"], "url": "https://github.com/telepresenceio/telepresence/commit/36458b65a010d2b316af48cd90e193ba190785d9"}, {"name": "https://github.com/telepresenceio/telepresence/commit/6871235b674a6e843908d09696354c4b0f91578c", "tags": ["x_refsource_MISC"], "url": "https://github.com/telepresenceio/telepresence/commit/6871235b674a6e843908d09696354c4b0f91578c"}, {"name": "https://github.com/telepresenceio/telepresence/releases/tag/v2.31.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/telepresenceio/telepresence/releases/tag/v2.31.0"}], "affected": [{"vendor": "telepresenceio", "product": "telepresence", "versions": [{"version": "< 2.31.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-04T20:39:55.525Z"}, "descriptions": [{"lang": "en", "value": "Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-network callers, ArriveAsClient stores a caller-supplied Namespace using only the ManagesNamespace manager watchlist check, and CreateIntercept can target any managed namespace without checking the session's Kubernetes RBAC. An attacker operating any pod with network access to the manager can register in an arbitrary managed namespace, create service intercepts, receive intercepted traffic, and obtain the victim pod's complete container environment, including secrets, tokens, and API keys. The default cluster-wide deployment manages all namespaces. This vulnerability is fixed in 2.31.0."}], "source": {"advisory": "GHSA-j8j4-rw65-56r6", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T16:09:24.840793Z", "id": "CVE-2026-102340", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T16:58:40.976Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-102340", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T16:09:24.840793Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T16:09:26.303Z"}}], "cna": {"title": "Telepresence: Traffic Manager gRPC has no auth \u2014 any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets", "source": {"advisory": "GHSA-j8j4-rw65-56r6", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "telepresenceio", "product": "telepresence", "versions": [{"status": "affected", "version": "< 2.31.0"}]}], "references": [{"url": "https://github.com/telepresenceio/telepresence/security/advisories/GHSA-j8j4-rw65-56r6", "name": "https://github.com/telepresenceio/telepresence/security/advisories/GHSA-j8j4-rw65-56r6", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/telepresenceio/telepresence/pull/4217", "name": "https://github.com/telepresenceio/telepresence/pull/4217", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/telepresenceio/telepresence/commit/04ec3464fe8878fdc96420cdc8036edefa0dc9ae", "name": "https://github.com/telepresenceio/telepresence/commit/04ec3464fe8878fdc96420cdc8036edefa0dc9ae", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/telepresenceio/telepresence/commit/36458b65a010d2b316af48cd90e193ba190785d9", "name": "https://github.com/telepresenceio/telepresence/commit/36458b65a010d2b316af48cd90e193ba190785d9", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/telepresenceio/telepresence/commit/6871235b674a6e843908d09696354c4b0f91578c", "name": "https://github.com/telepresenceio/telepresence/commit/6871235b674a6e843908d09696354c4b0f91578c", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/telepresenceio/telepresence/releases/tag/v2.31.0", "name": "https://github.com/telepresenceio/telepresence/releases/tag/v2.31.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-network callers, ArriveAsClient stores a caller-supplied Namespace using only the ManagesNamespace manager watchlist check, and CreateIntercept can target any managed namespace without checking the session's Kubernetes RBAC. An attacker operating any pod with network access to the manager can register in an arbitrary managed namespace, create service intercepts, receive intercepted traffic, and obtain the victim pod's complete container environment, including secrets, tokens, and API keys. The default cluster-wide deployment manages all namespaces. This vulnerability is fixed in 2.31.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862: Missing Authorization"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-04T20:39:55.525Z"}}}, "cveMetadata": {"cveId": "CVE-2026-102340", "state": "PUBLISHED", "dateUpdated": "2026-11-09T16:58:40.976Z", "dateReserved": "2026-09-28T22:38:42.254Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-11-04T20:39:55.525Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "telepresence", "vendor": "telepresenceio", "versions": [{"status": "affected", "version": "< 2.31.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-network callers, ArriveAsClient stores a caller-supplied Namespace using only the ManagesNamespace manager watchlist check, and CreateIntercept can target any managed namespace without checking the session's Kubernetes RBAC. An attacker operating any pod with network access to the manager can register in an arbitrary managed namespace, create service intercepts, receive intercepted traffic, and obtain the victim pod's complete container environment, including secrets, tokens, and API keys. The default cluster-wide deployment manages all namespaces. This vulnerability is fixed in 2.31.0."}], "id": "CVE-2026-102340", "lastModified": "2026-11-12T20:04:52.377", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 4.7, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-102340", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T16:09:24.840793Z", "version": "2.0.3"}}]}, "published": "2026-11-04T21:17:40.683", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/telepresenceio/telepresence/commit/04ec3464fe8878fdc96420cdc8036edefa0dc9ae"}, {"source": "security-advisories@github.com", "url": "https://github.com/telepresenceio/telepresence/commit/36458b65a010d2b316af48cd90e193ba190785d9"}, {"source": "security-advisories@github.com", "url": "https://github.com/telepresenceio/telepresence/commit/6871235b674a6e843908d09696354c4b0f91578c"}, {"source": "security-advisories@github.com", "url": "https://github.com/telepresenceio/telepresence/pull/4217"}, {"source": "security-advisories@github.com", "url": "https://github.com/telepresenceio/telepresence/releases/tag/v2.31.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/telepresenceio/telepresence/security/advisories/GHSA-j8j4-rw65-56r6"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-862"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/telepresenceio/telepresence: Telepresence: Information disclosure via unauthenticated Traffic Manager API", "id": "2567445", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567445"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "status": "draft"}, "cwe": "CWE-306", "details": ["Telepresence enables local development against a remote Kubernetes or OpenShift cluster. Prior to 2.31.0, the Traffic Manager gRPC API on port 8081 accepts unauthenticated cluster-network callers, ArriveAsClient stores a caller-supplied Namespace using only the ManagesNamespace manager watchlist check, and CreateIntercept can target any managed namespace without checking the session's Kubernetes RBAC. An attacker operating any pod with network access to the manager can register in an arbitrary managed namespace, create service intercepts, receive intercepted traffic, and obtain the victim pod's complete container environment, including secrets, tokens, and API keys. The default cluster-wide deployment manages all namespaces. This vulnerability is fixed in 2.31.0.", "A flaw was found in Telepresence. The Traffic Manager fails to authenticate internal cluster requests or verify Role-Based Access Control (RBAC) permissions when registering clients and creating service intercepts. An attacker with access to any pod on the cluster network can exploit this flaw to register within arbitrary namespaces, intercept service traffic, and access sensitive information including application secrets, tokens, and environment variables."], "mitigation": {"lang": "en:us", "value": "Restrict network access to the Traffic Manager service and limit its operational scope:\n1. Apply an OpenShift or Kubernetes NetworkPolicy targeting the Traffic Manager deployment to block ingress traffic to TCP port 8081, permitting connections only from authorized pods or trusted management CIDRs.\n2. Reconfigure Traffic Manager to manage only designated development namespaces rather than running in cluster-wide mode.\nCaveat: Applying ingress restrictions may terminate active intercepts and prevent clients in unauthorized namespaces from establishing connection sessions."}, "name": "CVE-2026-102340", "public_date": "2026-11-04T20:39:55Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-102340\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-102340\nhttps://github.com/telepresenceio/telepresence/commit/04ec3464fe8878fdc96420cdc8036edefa0dc9ae\nhttps://github.com/telepresenceio/telepresence/commit/36458b65a010d2b316af48cd90e193ba190785d9\nhttps://github.com/telepresenceio/telepresence/commit/6871235b674a6e843908d09696354c4b0f91578c\nhttps://github.com/telepresenceio/telepresence/pull/4217\nhttps://github.com/telepresenceio/telepresence/releases/tag/v2.31.0\nhttps://github.com/telepresenceio/telepresence/security/advisories/GHSA-j8j4-rw65-56r6"], "statement": "This vulnerability is rated as Important because an attacker with access to any pod within a cluster can bypass authorization controls and pivot across namespace boundaries. In standard cluster deployments where the management service oversees all namespaces, unauthenticated internal requests allow unauthorized callers to intercept application traffic. This enables the exfiltration of sensitive pod configurations, environment variables, and authentication tokens from other tenant workloads without requiring administrative privileges.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.31.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "telepresence", "source": "cna", "vendor": "telepresenceio"}, "product": "telepresence", "vendor": "telepresenceio"}], "created": "2026-11-04T21:30:09.549307+00:00", "updated": "2026-11-06T21:28:21.494322+00:00", "vendors": ["telepresenceio", "telepresenceio$PRODUCT$telepresence"]}