Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
cleanstart temporal-server-fips and rancher-loglevel risk certificate misuse
published 28 days ago
Summary
The Temporal Server FIPS version and Rancher Log Level component from cleanstart can be tricked into accepting forged digital certificates. This could let an attacker appear trusted and potentially intercept or alter data. Update to the latest cleanstart releases or apply the provided patches to restore proper certificate validation.
What to do
- Update cleanstart temporal-server-fips to version 1.32.0-r2.
- Update cleanstart rancher-loglevel to version 0.1.6-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | temporal-server-fips |
< 1.32.0-r2 Fix: upgrade to 1.32.0-r2
|
| CleanStart | cleanstart | rancher-loglevel |
< 0.1.6-r1 Fix: upgrade to 0.1.6-r1
|
Original advisory text
(*x509
CVE-2026-27145 affects multiple packages. (*x509. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published8 Oct 2026
Updated8 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2026-OG70620 · OSV
Track software like this
Free during beta