VDB

ANCHORE-2026-32720

ANCHORE-2026-32720 PUBLISHED

The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e. logs, metrics and distributed traces). Prior to 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other namespace. This breaks the security-by-default property expected as part of the deployment program, leading to a potential lateral movement. This vulnerability is fixed in 0.2.1.

Affected Products

VendorProductVersions
ctfer-iomonitoring0

Timeline

  • Mar 13, 2026 CVE Published
  • Mar 16, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›