CVE-2026-123665

LOW 2.8

kubescape Output printresults.go GetWriter permission

CVSS Score

2.8

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised.

CWE	CWE-275 CWE-266
Vendor	n/a
Product	kubescape
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for n/a kubescape

Be the first to know when new low vulnerabilities affecting n/a kubescape are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / kubescape

4.0.0 4.0.1 4.0.2 4.0.3 4.0.4 4.0.5 4.0.6 4.0.7 4.0.8 4.0.9 4.0.10 4.0.11 4.0.12 4.0.13 4.0.14 4.0.15

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/431789 vuldb.com: https://vuldb.com/vuln/431789/cti vuldb.com: https://vuldb.com/cve/CVE-2026-123665 vuldb.com: https://vuldb.com/submit/1033587 github.com: https://github.com/kubescape/kubescape/issues/4091 github.com: https://github.com/kubescape/kubescape/pull/4092 github.com: https://github.com/kubescape/kubescape/commit/d90f77314c7d4f2b53cf2425844bde2315bd26d2 github.com: https://github.com/kubescape/kubescape/releases/tag/v4.0.16 github.com: https://github.com/kubescape/kubescape/

Credits

🔍 carfeii (VulDB User)