Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
kubescape may let attackers bypass security checks
published 3 months ago
Summary
The kubescape tool has several flaws that could let a malicious user get around its protections and access sensitive data. These problems are fixed in newer releases of the software. Update kubescape to version 3.0.47-r1 or later to stay safe.
What to do
- Update cleanstart kubescape to version 3.0.47-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | kubescape |
< 3.0.47-r1 Fix: upgrade to 3.0.47-r1
|
Original advisory text
Security fixes for CVE-2025-15558, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-1229, CVE-2026-22703, CVE-2026-22772, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24117, CVE-2026-24137, CVE-2026-24686, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, CVE-2026-33481, ghsa-273p-m2cw-6833, ghsa-37cx-329c-33x3, ghsa-38pp-6gcp-rqvm, ghsa-4c4x-jm2x-pf9j, ghsa-59jp-pj84-45mr, ghsa-846p-jg2w-w324, ghsa-9h8m-3fm2-qjrq, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-q9hv-hpm4-hj6x, ghsa-rjcw-vg7j-m9rc, ghsa-whqx-f9j3-ch6m applied in versions: 3.0.47-r0, 3.0.47-r1
Multiple security vulnerabilities affect the kubescape package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-15558 URL
- https://osv.dev/vulnerability/CVE-2025-61726 URL
- https://osv.dev/vulnerability/CVE-2025-61728 URL
- https://osv.dev/vulnerability/CVE-2025-61730 URL
- https://osv.dev/vulnerability/CVE-2025-61731 URL
- https://osv.dev/vulnerability/CVE-2025-61732 URL
- https://osv.dev/vulnerability/CVE-2025-68119 URL
- https://osv.dev/vulnerability/CVE-2025-68121 URL
- https://osv.dev/vulnerability/CVE-2026-1229 URL
- https://osv.dev/vulnerability/CVE-2026-22703 URL
- https://osv.dev/vulnerability/CVE-2026-22772 URL
- https://osv.dev/vulnerability/CVE-2026-23831 URL
- https://osv.dev/vulnerability/CVE-2026-23991 URL
- https://osv.dev/vulnerability/CVE-2026-23992 URL
- https://osv.dev/vulnerability/CVE-2026-24051 URL
- https://osv.dev/vulnerability/CVE-2026-24117 URL
- https://osv.dev/vulnerability/CVE-2026-24137 URL
- https://osv.dev/vulnerability/CVE-2026-24686 URL
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-25934 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27141 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://osv.dev/vulnerability/CVE-2026-33186 URL
- https://osv.dev/vulnerability/CVE-2026-33481 URL
- https://osv.dev/vulnerability/ghsa-273p-m2cw-6833 URL
- https://osv.dev/vulnerability/ghsa-37cx-329c-33x3 URL
- https://osv.dev/vulnerability/ghsa-38pp-6gcp-rqvm URL
- https://osv.dev/vulnerability/ghsa-4c4x-jm2x-pf9j URL
- https://osv.dev/vulnerability/ghsa-59jp-pj84-45mr URL
- https://osv.dev/vulnerability/ghsa-846p-jg2w-w324 URL
- https://osv.dev/vulnerability/ghsa-9h8m-3fm2-qjrq URL
- https://osv.dev/vulnerability/ghsa-fcv2-xgw5-pqxf URL
- https://osv.dev/vulnerability/ghsa-fphv-w9fq-2525 URL
- https://osv.dev/vulnerability/ghsa-jqc5-w2xx-5vq4 URL
- https://osv.dev/vulnerability/ghsa-mqqf-5wvp-8fh8 URL
- https://osv.dev/vulnerability/ghsa-p436-gjf2-799p URL
- https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3 URL
- https://osv.dev/vulnerability/ghsa-q9hv-hpm4-hj6x URL
- https://osv.dev/vulnerability/ghsa-rjcw-vg7j-m9rc URL
- https://osv.dev/vulnerability/ghsa-whqx-f9j3-ch6m URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-15558 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61726 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61728 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61730 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61731 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61732 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68119 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-1229 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-22703 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-22772 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-23831 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-23991 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-23992 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-24051 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-24117 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-24137 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-24686 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25934 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27141 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33186 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33481 URL
Timeline
Published21 Jul 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-QG58874 · OSV
Track software like this
Free during beta