Important severity7.6NVD Advisory· Published Jul 30, 2026
project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy)
CVE-2026-18378
Description
project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy)
Affected products
1Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.