CVE-2026-27112

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27112", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-17T18:42:27.042Z", "datePublished": "2026-02-20T21:22:56.719Z", "dateUpdated": "2026-02-24T18:43:40.423Z"}, "containers": {"cna": {"title": "Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints", "problemTypes": [{"descriptions": [{"cweId": "CWE-863", "lang": "en", "description": "CWE-863: Incorrect Authorization", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "baseScore": 9.4, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "version": "4.0"}}], "references": [{"name": "https://github.com/akuity/kargo/security/advisories/GHSA-7g9x-cp9g-92mr", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/akuity/kargo/security/advisories/GHSA-7g9x-cp9g-92mr"}, {"name": "https://github.com/akuity/kargo/commit/155c6852ffbffa2902f18e6c7add91a846e8d344", "tags": ["x_refsource_MISC"], "url": "https://github.com/akuity/kargo/commit/155c6852ffbffa2902f18e6c7add91a846e8d344"}], "affected": [{"vendor": "akuity", "product": "kargo", "versions": [{"version": ">= 1.9.0-rc.1, < 1.9.3", "status": "affected"}, {"version": ">= 1.8.0-rc.1, < 1.8.11", "status": "affected"}, {"version": ">= 1.7.0, < 1.7.8", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-20T21:22:56.719Z"}, "descriptions": [{"lang": "en", "value": "Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted payloads can manifest a bug present in the logic of both endpoints to inject arbitrary resources (of specific types only) into the underlying namespace of an existing Project using the API server's own permissions when that behavior was not intended. Critically, an attacker may exploit this as a vector for elevating their own permissions, which can then be leveraged to achieve remote code execution or secret exfiltration. Exfiltrated artifact repository credentials can be leveraged, in turn, to execute further attacks. In some configurations of the Kargo control plane's underlying Kubernetes cluster, elevated permissions may additionally be leveraged to achieve remote code execution or secret exfiltration using kubectl. This can reduce the complexity of the attack, however, worst case scenarios remain entirely achievable even without this. This vulnerability is fixed in v1.7.8, v1.8.11, and v1.9.3."}], "source": {"advisory": "GHSA-7g9x-cp9g-92mr", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-24T18:43:26.135548Z", "id": "CVE-2026-27112", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T18:43:40.423Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27112", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-24T18:43:26.135548Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T18:43:34.043Z"}}], "cna": {"title": "Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints", "source": {"advisory": "GHSA-7g9x-cp9g-92mr", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 9.4, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH"}}], "affected": [{"vendor": "akuity", "product": "kargo", "versions": [{"status": "affected", "version": ">= 1.9.0-rc.1, < 1.9.3"}, {"status": "affected", "version": ">= 1.8.0-rc.1, < 1.8.11"}, {"status": "affected", "version": ">= 1.7.0, < 1.7.8"}]}], "references": [{"url": "https://github.com/akuity/kargo/security/advisories/GHSA-7g9x-cp9g-92mr", "name": "https://github.com/akuity/kargo/security/advisories/GHSA-7g9x-cp9g-92mr", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/akuity/kargo/commit/155c6852ffbffa2902f18e6c7add91a846e8d344", "name": "https://github.com/akuity/kargo/commit/155c6852ffbffa2902f18e6c7add91a846e8d344", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted payloads can manifest a bug present in the logic of both endpoints to inject arbitrary resources (of specific types only) into the underlying namespace of an existing Project using the API server's own permissions when that behavior was not intended. Critically, an attacker may exploit this as a vector for elevating their own permissions, which can then be leveraged to achieve remote code execution or secret exfiltration. Exfiltrated artifact repository credentials can be leveraged, in turn, to execute further attacks. In some configurations of the Kargo control plane's underlying Kubernetes cluster, elevated permissions may additionally be leveraged to achieve remote code execution or secret exfiltration using kubectl. This can reduce the complexity of the attack, however, worst case scenarios remain entirely achievable even without this. This vulnerability is fixed in v1.7.8, v1.8.11, and v1.9.3."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863: Incorrect Authorization"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-20T21:22:56.719Z"}}}, "cveMetadata": {"cveId": "CVE-2026-27112", "state": "PUBLISHED", "dateUpdated": "2026-02-24T18:43:40.423Z", "dateReserved": "2026-02-17T18:42:27.042Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-02-20T21:22:56.719Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "kargo", "vendor": "akuity", "versions": [{"status": "affected", "version": ">= 1.9.0-rc.1, < 1.9.3"}, {"status": "affected", "version": ">= 1.8.0-rc.1, < 1.8.11"}, {"status": "affected", "version": ">= 1.7.0, < 1.7.8"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*", "matchCriteriaId": "5A5AF03C-6D09-45BD-9C5D-A26A58F2FF32", "versionEndExcluding": "1.7.8", "versionStartIncluding": "1.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*", "matchCriteriaId": "E8F9AD6D-0D73-48DE-BC30-52DA3E9539A9", "versionEndExcluding": "1.8.11", "versionStartIncluding": "1.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:akuity:kargo:*:*:*:*:*:kubernetes:*:*", "matchCriteriaId": "3B60DE85-B240-4BA0-896D-2A0BA369B0AF", "versionEndExcluding": "1.9.3", "versionStartIncluding": "1.9.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted payloads can manifest a bug present in the logic of both endpoints to inject arbitrary resources (of specific types only) into the underlying namespace of an existing Project using the API server's own permissions when that behavior was not intended. Critically, an attacker may exploit this as a vector for elevating their own permissions, which can then be leveraged to achieve remote code execution or secret exfiltration. Exfiltrated artifact repository credentials can be leveraged, in turn, to execute further attacks. In some configurations of the Kargo control plane's underlying Kubernetes cluster, elevated permissions may additionally be leveraged to achieve remote code execution or secret exfiltration using kubectl. This can reduce the complexity of the attack, however, worst case scenarios remain entirely achievable even without this. This vulnerability is fixed in v1.7.8, v1.8.11, and v1.9.3."}, {"lang": "es", "value": "Kargo gestiona y automatiza la promoci\u00f3n de artefactos de software. Desde la 1.7.0 hasta antes de las v1.7.8, v1.8.11 y v1.9.3, los puntos finales de creaci\u00f3n de recursos por lotes tanto de la API gRPC heredada de Kargo como de la API REST m\u00e1s reciente aceptan cargas \u00fatiles YAML de m\u00faltiples documentos. Cargas \u00fatiles especialmente dise\u00f1adas pueden manifestar un error presente en la l\u00f3gica de ambos puntos finales para inyectar recursos arbitrarios (solo de tipos espec\u00edficos) en el espacio de nombres subyacente de un Proyecto existente utilizando los propios permisos del servidor API cuando ese comportamiento no estaba previsto. Cr\u00edticamente, un atacante puede explotar esto como un vector para elevar sus propios permisos, lo que luego puede aprovecharse para lograr la ejecuci\u00f3n remota de c\u00f3digo o la exfiltraci\u00f3n de secretos. Las credenciales de repositorio de artefactos exfiltradas pueden aprovecharse, a su vez, para ejecutar ataques adicionales. En algunas configuraciones del cl\u00faster de Kubernetes subyacente del plano de control de Kargo, los permisos elevados pueden aprovecharse adicionalmente para lograr la ejecuci\u00f3n remota de c\u00f3digo o la exfiltraci\u00f3n de secretos usando kubectl. Esto puede reducir la complejidad del ataque, sin embargo, los escenarios de peor caso siguen siendo totalmente alcanzables incluso sin esto. Esta vulnerabilidad est\u00e1 corregida en las v1.7.8, v1.8.11 y v1.9.3."}], "id": "CVE-2026-27112", "lastModified": "2026-06-17T10:26:41.223", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.4, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27112", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-24T18:43:26.135548Z", "version": "2.0.3"}}]}, "published": "2026-02-20T22:16:29.343", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/akuity/kargo/commit/155c6852ffbffa2902f18e6c7add91a846e8d344"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/akuity/kargo/security/advisories/GHSA-7g9x-cp9g-92mr"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.9.0-rc.1,1.9.3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.8.0-rc.1,1.8.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.7.0,1.7.8)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "kargo", "source": "cna", "vendor": "akuity"}, "product": "kargo", "vendor": "akuity"}], "analysis": {"en": {"generated_at": "2026-04-18T11:26:47.576710+00:00", "value": {"mitigation_remediation": ["Apply the latest Akuity Kargo release (v1.7.8, v1.8.11, or v1.9.3) to remove the injection flaw.", "Ensure that all batch resource creation endpoints are disabled or restricted to authorized users only in the current configuration.", "Review cluster RBAC settings to confirm that only necessary roles have permission to create resources in the Project namespaces."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution/Privilege Escalation via Authorization Bypass"}, "threat_synthesis": {"affected_systems": "The affected vendor is Akuity Kargo. Versions from 1.7.0 up to 1.7.7, from 1.8.0 up to 1.8.10, and from 1.9.0 up to 1.9.2 are impacted. These releases accepted multi\u2011document YAML payloads on both the legacy gRPC API and the newer REST API.", "description_and_impact": "Kargo\u2019s batch resource creation endpoints in both its legacy gRPC and newer REST APIs accepted multi-document YAML payloads. A flaw in the logic of these endpoints allows an attacker to insert arbitrary resources of certain types into a Project\u2019s namespace using the API server\u2019s own permissions, when that behavior was not intended. This effectively bypasses authorization controls and can elevate the attacker\u2019s permissions, enabling remote code execution or exfiltration of secrets. The vulnerability is a classic authorization bypass (CWE-863) that exposes the control plane\u2019s underlying Kubernetes cluster to elevated attacks.", "risk_and_exploitability": "The vulnerability has a CVSS score of 9.4, indicating critical severity, while the EPSS score of <1% suggests a low current exploitation probability, and it is not listed in the CISA KEV catalog. However, because the flaw permits injection of resources with the API server\u2019s permissions, an attacker with minimal access can potentially gain cluster\u2011level privileges. The attack vector likely involves sending crafted YAML through permitted API endpoints, and no additional prerequisites beyond API access are mentioned in the description. Patching to the fixed releases removes the ability to inject and thus eliminates the risk."}}}}, "created": "2026-02-23T14:35:03.117315+00:00", "updated": "2026-04-18T11:30:44.323641+00:00", "vendors": ["akuity", "akuity$PRODUCT$kargo"]}