4.8
Medium
CVE-2026-92611 In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at…
Description
In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a single rule instead of evaluating later entries, which can cause deny `LogRule` entries to be skipped and allow unauthorized access to another workload's logs.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Eclipse Ankaios 0.6 | 0.6.0 → < 1.0.4 | 1.0.4 |
References
- github.com github.com
- gitlab.eclipse.org gitlab.eclipse.org
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Eclipse Ankaios
The 4 CVEs of Eclipse Ankaios →
CVE-2026-86836
In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes…
8.4
High
CVE-2026-85201
In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a…
6.8
Medium
CVE-2026-84173
In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates…
8.3
High