01 Record

CVE-2026-73843

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

CriticalPUBLISHEDCNA: GitHub_M

Base score9.6 CVSS v3.xCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

02 Description

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

Published: 2026-08-13 22:02Z20 HR AGO
Last updated: 2026-08-14 18:06Z38 MIN AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Critical (CVSS 9.6)
CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses: CWE-306 CWE-668 CWE-862
SSVC decision: ExploitationnoneAutomatablenoTechnical Impacttotal
Data version: 5.2
Document digest: 86258092935dc62baef42460e7997143cc1d1a018626984bf317da62a7fcca9c

VendorProductVersionsPlatforms

openchoreoopenchoreo< 1.0.2, >= 1.1.0, < 1.1.2—