anonhaven

CVE-2026-119115

HIGH CVSS 4.0: 8.4
Updated Oct 29, 2026
Kubernetes
Parameter Value
CVSS 8.4 (HIGH)
Type CWE-863 (Incorrect Authorization)
Vendor Kubernetes
Public PoC No

Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain certificates, including subordinate CA certificates, signed by a cluster-scoped AWS Private CA issuer that their approval policy does not authorize. To remediate this issue, users should upgrade aws-privateca-issuer to version v1.10.1 or the AWS Private CA Connector for Kubernetes EKS add-on to version v1.10.1-eksbuild.1, and update any certificate requests, Certificate resources, or Ingress annotations whose issuerRef.kind is missing, incorrect, or does not match the referenced issuer, since v1.10.1 requires issuerRef.kind to be exactly AWSPCAIssuer or AWSPCAClusterIssuer and to match the issuer it references.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
None
No disruption

CVSS Vector v4.0

Weakness Type (CWE)

CWE-863 Incorrect Authorization

References 3

https://aws.amazon.com/security/security-bulletins/2026-156-aws/
ff89ba41-3aa1-4d27-914a-91399e9639e5
https://github.com/cert-manager/aws-privateca-issuer/releases/tag/v1.10.1
ff89ba41-3aa1-4d27-914a-91399e9639e5
https://github.com/cert-manager/aws-privateca-issuer/security/advisories/GHSA-h…
ff89ba41-3aa1-4d27-914a-91399e9639e5
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-118760

Kubernetes

6.5

CVE-2026-113951

Apple

None

CVE-2026-83938

Kubernetes

10.0

CVE-2026-115356

Kubernetes

5.3

CVE-2026-113788

Kubernetes

9.4