CVE-2026-32241 PUBLISHED CVSS 7.5 HIGH

Flannel has cross-node remote code execution via extension backend BackendData injection

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
flannel-ioflannel< 0.28.2, < 0.28.2, < 0.28.2
github.comflannel-io/flannel0, 0, 0

Timeline

References

Open in Interactive Console →