Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
kubernetes-csi-external-snapshotter and opa-fips allow malicious file execution
published 9 days ago
Summary
Both the Kubernetes snapshotter and the OPA FIPS module on Unix can be tricked by a specially crafted file to run unwanted code, risking system compromise. This could let an attacker gain control or steal data. Update these components to the newest versions or follow the vendor's remediation steps as soon as possible.
What to do
- Update cleanstart kubernetes-csi-external-snapshotter to version 8.7.0-r0.
- Update cleanstart opa-fips to version 1.21.2-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | kubernetes-csi-external-snapshotter |
< 8.7.0-r0 Fix: upgrade to 8.7.0-r0
|
| CleanStart | cleanstart | opa-fips |
< 1.21.2-r0 Fix: upgrade to 1.21.2-r0
|
Original advisory text
On Unix systems, opening a file in an os
CVE-2026-39822 affects multiple packages. On Unix systems, opening a file in an os. See references for individual vulnerability details.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CLEANSTART-2026-GK32984 · OSV
Track software like this
Free during beta