Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
prometheus-operator 0.91.0-r2 may let attackers execute code
published 3 months ago
Summary
The prometheus-operator package version 0.91.0-r2 contained two security weaknesses that could allow a malicious user to run unauthorized commands on the system. These flaws have been corrected in this release. Update to version 0.91.0-r2 as soon as possible to protect your monitoring environment.
What to do
- Update cleanstart prometheus-operator to version 0.91.0-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | prometheus-operator |
< 0.91.0-r2 Fix: upgrade to 0.91.0-r2
|
Original advisory text
Security fixes in prometheus-operator 0.91.0-r2
Package prometheus-operator version 0.91.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852
Timeline
Published30 Jul 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-JB55968 · OSV
Track software like this
Free during beta