CVE-2026-54462

Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoder(io.TeeReader(r.Body, &bodyBuffer)) under an http.HandlerFunc without an http.MaxBytesReader or equivalent body-size limit. A pod-network client can send one oversized POST to an admission webhook, causing the decoder and bodyBuffer to retain amplified copies of the request until the controller pod exhausts memory and is OOM-killed. Every downstream consumer using the shared webhook server inherits the vulnerable behavior, including Knative, Tekton, KEDA, Sigstore policy-controller, and Kpack. For consumers configured with failurePolicy=Fail, loss of the controller can interrupt admission; with failurePolicy=Ignore, the affected webhook is unavailable while other admissions continue. This issue is fixed in version 0.0.0-20260531000007-52dbd5ece63f.

• CWE-770

• https://github.com/knative/pkg/commit/52dbd5ece63fe6d2d340ecbebec160550f460818
• https://github.com/knative/pkg/pull/3363
• https://github.com/knative/pkg/security/advisories/GHSA-2hw4-c9m4-f2fj
• https://github.com/knative/pkg/security/advisories/GHSA-2hw4-c9m4-f2fj

Published

Oct 27, 2026

Last Modified

Nov 2, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54457TensorZero is an open-source LLMOps platform that unifies an…7.7
• CVE-2026-54458WWBN AVideo is an open source video platform. Versions prior…9.6
• CVE-2026-54459FileRise is a self-hosted web-based file manager with multi-…4.3
• CVE-2026-5446In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS …7.1
• CVE-2026-54460OpenReception's appointment booking software provides an end…9.8
• CVE-2026-54461Habitica is a habit tracker application that treats goals li…6.5
• CVE-2026-54463websocket-driver is a WebSocket protocol handler with plugga…7.5
• CVE-2026-54464### Impact If this library is used in tandem with the `perm…6.3
• CVE-2026-54465websocket-driver is a WebSocket protocol handler with plugga…7.5
• CVE-2026-54466websocket-driver is a WebSocket protocol handler with plugga…7.5
• CVE-2026-54467On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform be…7
• CVE-2026-54468Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, …6.5