High severity8.8NVD Advisory· Published Jul 24, 2024· Updated Jun 17, 2026

CVE-2024-36541

Description

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Affected products

logging-operator/logging-operatordescription
Logging Operator/logging-operatorllm-create
Range: =4.6.0

Patches

Vulnerability mechanics

References

gist.github.com/HouqiyuA/f972d1c152f3b8127af01206f7c2af0dnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000