Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
linkerd2 could let attackers bypass security controls
published 5 months ago
Summary
The linkerd2 software package has several weaknesses that could let a malicious user bypass its security checks or cause other unintended behavior. These problems are fixed in newer versions of linkerd2, so updating to the latest release is the recommended action.
What to do
- Update cleanstart linkerd2 to version 26.3.3-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | linkerd2 |
< 26.3.3-r0 Fix: upgrade to 26.3.3-r0
|
Original advisory text
Security fixes for CVE-2026-29181, CVE-2026-33186, CVE-2026-35469, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 26.1.4-r0, 26.3.3-r0
Multiple security vulnerabilities affect the linkerd2 package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2026-29181 URL
- https://osv.dev/vulnerability/CVE-2026-33186 URL
- https://osv.dev/vulnerability/CVE-2026-35469 URL
- https://osv.dev/vulnerability/ghsa-hr2v-4r36-88hr URL
- https://osv.dev/vulnerability/ghsa-mh2q-q3fh-2475 URL
- https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3 URL
- https://osv.dev/vulnerability/ghsa-pc3f-x583-g7j2 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-29181 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33186 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-35469 URL
Timeline
Published18 May 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-QX43073 · OSV
Track software like this
Free during beta