VYPR

kruise-manager

by Openkruise

CVEs (1)

  • CVE-2026-120656Nov 2, 2026
    risk 0.00cvss —epss —

    OpenKruise kruise-manager exposes an unauthenticated ppof endpoint when enabled, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any RBAC pod.