VDB
GO-2026-4762
GO-2026-4762
PUBLISHED
Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | grafana-12.1 | 0, 0, 0 |
| wolfi | cortex | 0, 0, 0 |
| chainguard | datadog-agent-7.74 | 0, 0, 0 |
| chainguard | rke2-cloud-provider | 0, 0, 0 |
| chainguard | traefik-2.11 | 0, 0, 0 |
| chainguard | linkerd2-fips | 0, 0, 0 |
| chainguard | longhorn-share-manager-1.9 | 0, 0, 0 |
| wolfi | mattermost-11.1 | 0, 0, 0 |
| chainguard | crossplane-provider-family-aws-fips | 0, 0, 0 |
| chainguard | sql_exporter | 0, 0, 0 |
| chainguard | etcd-3.6 | 0, 0, 0 |
| chainguard | smarter-device-manager | 0, 0, 0 |
| chainguard | atlas-1.1-fips | 0, 0, 0 |
| wolfi | kubescape-operator | 0, 0, 0 |
| chainguard | ansible-operator-fips | 0, 0, 0 |
| chainguard | longhorn-manager-fips-1.10 | 0, 0, 0 |
| chainguard | flux-notification-controller-fips | 0, 0, 0 |
| chainguard | cert-manager-fips-1.20 | 0, 0, 0 |
| chainguard | terraform-provider-random-fips | 0, 0, 0 |
| wolfi | temporal | 0, 0, 0 |
…and 1862 more
Timeline
- Mar 27, 2026 CVE Published
- Mar 30, 2026 CVE Updated