{"vulnerability": "cve-2026-73841", "sightings": [{"uuid": "b6345856-5e2a-4c65-888e-3c45f8c932da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73841", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msyu3hbksu2r", "content": "\ud83d\udfe0 CVE-2026-73841 - High (8.8)\n\nOpenChoreo is a complete, open-source developer platform for Kubernetes. From 1.2.0-rc.1 until 1....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73841/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T00:00:41.969525Z"}, {"uuid": "c2635842-85a9-473b-869e-425d41be8b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73841", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msywtf7dtm2n", "content": "OpenChoreo Bleeds Out While Everyone Pretends Kubernetes Is Self-Healing\nPANIC 68% | Lag 0.0h | CVE-2026-73841 is a high-severity vulnerability in OpenChoreo, affecting versions from 1.2.0-rc.1 on\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-14T00:49:51.684389Z"}, {"uuid": "217b5797-55b2-462e-9074-2773a817f3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73841", "type": "seen", "source": "https://gist.github.com/alon710/fa4c1447c893b6cd0a1784fbaa13a97e", "content": "# CVE-2026-73841: CVE-2026-73841: Broken Object Level Authorization (BOLA) in OpenChoreo Container Exec and Wirelogs Endpoints\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73841\n\n## Summary\nAn Insecure Direct Object Reference (IDOR) / Broken Object Level Authorization (BOLA) vulnerability in OpenChoreo allows authenticated users with project-level permissions to bypass tenant boundaries. By manipulating client-controlled query parameters, an attacker can execute arbitrary commands inside Kubernetes containers or view sensitive communication streams of resources belonging to other, highly privileged projects within the same namespace.\n\n## TL;DR\nOpenChoreo failed to validate if a target component belonged to the caller's authorized project when processing container command executions and wirelog requests. Attackers could specify a project they owned while targeting components in other projects, gaining unauthorized remote shell access to arbitrary pods.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-639 / CWE-863\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.8 (High)\n- **EPSS Score**: 0.00353 (Percentile: 28.24%)\n- **Impact**: Command Execution / Information Disclosure\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- OpenChoreo API Server (openchoreo-api)\n- **OpenChoreo**: < 1.1.6 (Fixed in: `1.1.6`)\n- **OpenChoreo**: >= 1.2.0-m.1, < 1.2.3 (Fixed in: `1.2.3`)\n\n## Mitigation\n\n- Upgrade OpenChoreo deployment to version 1.1.6 or 1.2.3 immediately.\n- Audit active project role-bindings to restrict permissions such as `component:exec` and `wirelogs:view` to essential personnel.\n- Deploy network policies to isolate sensitive pods from direct inter-namespace and inter-project communication.\n\n**Remediation Steps:**\n1. Identify the current deployed version of OpenChoreo in your cluster.\n2. For installations on the 1.1 release line, apply the update to version 1.1.6.\n3. For installations on the 1.2 release line, apply the update to version 1.2.3.\n4. Verify deployment status by inspecting the `openchoreo-api` image tag and confirming it matches the patched releases.\n5. Monitor application logs for any unauthorized request denials containing the message: 'requested project does not own the target component; denying exec'.\n\n## References\n\n- [GitHub Security Advisory GHSA-52gf-6rpq-fgmx](https://github.com/openchoreo/openchoreo/security/advisories/GHSA-52gf-6rpq-fgmx)\n- [CVE-2026-73841 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-73841)\n- [OpenChoreo Pull Request 4251](https://github.com/openchoreo/openchoreo/pull/4251)\n- [OpenChoreo Pull Request 4516](https://github.com/openchoreo/openchoreo/pull/4516)\n- [OpenChoreo Pull Request 4538](https://github.com/openchoreo/openchoreo/pull/4538)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73841) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T02:33:26.794457Z"}]}