← All advisories

Critical severity9.8NVD Advisory· Published Jul 24, 2024· Updated Jun 17, 2026

CVE-2024-36535

CVE-2024-36535

Description

Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Affected products

2

Meshery/Mesherycpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=0.7.51

Patches

Vulnerability mechanics

References

1

gist.github.com/HouqiyuA/2950c3993cdeff23afcbd73ba7a33879nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.