CVE-2026-65834

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-65834

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-65834.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2026-65834

Aliases

Downstream

Related

Published

2026-07-30T19:48:55Z

Modified

2026-10-25T02:36:06Z

Severity

6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H CVSS Calculator

Summary

Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests

Details

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.NodeMetadata.ForbiddenAnnotations.Regex were not validated by the configuration admission webhook, allowing a Cluster Admin to store a malformed regex that later reached regexp.MustCompile in pkg/api/forbidden_list.go through internal/webhook/node/user_metadata.go and crashed the node admission webhook on Node create, update, or patch requests. This issue is fixed in version 0.13.8.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-20",
        "CWE-248"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65834.json"
}

References

Affected packages

Git / github.com/projectcapsule/capsule

Affected ranges

Type

GIT

Repo

https://github.com/projectcapsule/capsule

Events

Introduced

Fixed

4b07463705d6eebcaabffcabd77d401ef7a809f3

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.13.8"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "original_tag": "v0.13.8",
            "range": [
                {
                    "fixed": "4b07463705d6eebcaabffcabd77d401ef7a809f3"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.13.8"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

Affected versions

0.*

0.0.1

0.2.0-rc1

helm-v0.*

helm-v0.1.0

helm-v0.1.1

helm-v0.1.10

helm-v0.1.11

helm-v0.1.12

helm-v0.1.2

helm-v0.1.3

helm-v0.1.4

helm-v0.1.6

helm-v0.1.7

helm-v0.1.8

helm-v0.2.0

helm-v0.3.0

helm-v0.3.1

helm-v0.3.2

helm-v0.3.3

helm-v0.3.4

helm-v0.3.5

helm-v0.3.6

helm-v0.4.0

helm-v0.4.1

helm-v0.4.2

helm-v0.4.3

helm-v0.4.4

helm-v0.4.6

helm-v0.4.7

helm-v0.4.8

helm-v0.5.0

helm-v0.5.1

helm-v0.5.2

helm-v0.5.3

helm-v0.6.0

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.0.5-rc1

v0.0.5-rc2

v0.1.0

v0.1.0-rc1

v0.1.0-rc2

v0.1.0-rc3

v0.1.0-rc4

v0.1.0-rc5

v0.1.0-rc6

v0.1.1

v0.1.1-rc0

v0.1.1-rc1

v0.1.2

v0.1.2-rc0

v0.1.2-rc1

v0.1.3

v0.10.0

v0.10.1

v0.10.2

v0.10.3

v0.10.4

v0.10.5

v0.10.6

v0.10.7

v0.10.8

v0.10.9

v0.11.0

v0.11.1

v0.11.2

v0.12.0

v0.12.1

v0.12.2

v0.12.3

v0.12.4

v0.13.0

v0.13.1

v0.13.2

v0.13.3

v0.13.4

v0.13.5

v0.13.6

v0.13.7

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.4.0

v0.4.0-rc.1

v0.4.0-rc.2

v0.4.0-rc.3

v0.4.1

v0.4.2

v0.5.0

v0.6.0

v0.6.0-rc0

v0.6.1

v0.6.2

v0.7.0

v0.7.0-rc.1

v0.7.1

v0.7.2

v0.7.3

v0.7.4

v0.8.0

v0.8.1

v0.9.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-65834.json"