Important severity8.8NVD Advisory· Published Aug 11, 2026
cluster-backup-operator: cluster-backup-operator: Restore.spec.hooks passed verbatim to Velero Restore — arbitrary command execution in restored pods
CVE-2026-66798
Description
cluster-backup-operator: cluster-backup-operator: Restore.spec.hooks passed verbatim to Velero Restore — arbitrary command execution in restored pods
Affected products
1Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.