THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-62246 (HIGH 8.5) — Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema, database user, and etcd key prefix from a lossy namespace-and-name normalization in GetDefaultDatastoreSchema() and GetDefaultDatastoreUsername()

[NVD] CVE-2026-62246 (HIGH 8.5) — Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema, database user, and etcd key prefix from a lossy namespace-and-name normalization in GetDefaultDatastoreSchema() and GetDefaultDatastoreUsername()

mednvdPublished 2026-07-30

CVE-2026-62246 CVSS: 8.5 HIGH Published: 2026-07-30T22:16:55.300

Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema, database user, and etcd key prefix from a lossy namespace-and-name normalization in GetDefaultDatastoreSchema() and GetDefaultDatastoreUsername(), allowing distinct tenants with colliding normalized

Indicators of compromise

CVE-2026-62246cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-62246