← All advisories

Critical severity9.8NVD Advisory· Published Jul 24, 2024· Updated Jun 17, 2026

CVE-2024-36535

CVE-2024-36535

Description

Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Affected products

3

Meshery/Mesheryllm-fuzzy2 versions
<=0.7.51+ 1 more
- (no CPE)range: <=0.7.51
- (no CPE)
Layer5/Meshery
cpe:2.3:a:layer5:meshery:0.7.51:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

gist.github.com/HouqiyuA/2950c3993cdeff23afcbd73ba7a33879nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.