CVE-2026-53487

Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request `/api/v1/overview` for a cluster that their roles do not permit by selecting that cluster with `x-cluster-name`. The overview route is registered before `middleware.RBACMiddleware()` and `GetOverview` only checks `len(user.Roles) > 0`, so it returns aggregate Kubernetes inventory and capacity data from unauthorized clusters. Version 0.12.3 fixes the issue.

• CWE-862

• https://github.com/kite-org/kite/security/advisories/GHSA-gvhc-wv3v-7pf8
• https://github.com/kite-org/kite/security/advisories/GHSA-gvhc-wv3v-7pf8

Published

Aug 21, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5348The Academy LMS – WordPress LMS Plugin for Complete eLearnin…5.3
• CVE-2026-53480Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…2.7
• CVE-2026-53481Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…9.8
• CVE-2026-53482Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…7.5
• CVE-2026-53483Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…9.8
• CVE-2026-53486The decompress package for Node.js extracts archives. Prior …9.1
• CVE-2026-53488containerd is an open-source container runtime. In versions …8.8
• CVE-2026-53489containerd is an open-source container runtime. Versions pri…6.5
• CVE-2026-5349A vulnerability was identified in Trendnet TEW-657BRM 1.00.1…8.8
• CVE-2026-53492containerd is an open-source container runtime. In Versions …9.6
• CVE-2026-53493containerd is an open-source container runtime. Prior to ver…6.9
• CVE-2026-53495containerd is an open-source container runtime. Prior to 1.7…6.8