{"id":"EUVD-2026-20965","enisaUuid":"377c8bd7-c61b-3267-b088-65b932d26437","description":"Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — production database credentials, API keys, service tokens — with a single kubectl apply. The operator reads the victim\u0027s secret using its ClusterRole and writes the password into a new secret in the attacker\u0027s namespace. The operator acts as a confused deputy: its ServiceAccount has cluster-wide secret read/write (aiven-operator-role ClusterRole), and it trusts user-supplied namespace values in spec.connInfoSecretSource.namespace without validation. No admission webhook enforces this boundary — the ServiceUser webhook returns nil, and no ClickhouseUser webhook exists. This vulnerability is fixed in 0.37.0.","datePublished":"Apr 9, 2026, 5:14:07 PM","dateUpdated":"Apr 10, 2026, 2:08:22 PM","baseScore":6.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","references":"https://github.com/aiven/aiven-operator/security/advisories/GHSA-99j8-wv67-4c72\nhttps://github.com/aiven/aiven-operator/commit/032c9ba63257fdd2fddfb7f73f71830e371ff182\nhttps://github.com/aiven/aiven-operator/releases/tag/v0.37.0\n","aliases":"CVE-2026-39961\nGHSA-99j8-wv67-4c72\n","assigner":"GitHub_M","epss":0.4,"enisaIdProduct":[{"id":"3481e66e-bc82-3cba-a49e-0d2303d6a791","product":{"name":"aiven-operator","vendor":{"name":"aiven"}},"product_version":"\u003c 0.37.0"}],"enisaIdVendor":[{"id":"473ade46-c978-37a6-8bc4-78f7ccc5b991","vendor":{"name":"aiven"}}],"enisaIdVulnerability":[{"id":"6d533271-a17b-31ce-8622-852c5eeea7a5","vulnerability":{"id":"CVE-2026-39961","description":"Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — production database credentials, API keys, service tokens — with a single kubectl apply. The operator reads the victim\u0027s secret using its ClusterRole and writes the password into a new secret in the attacker\u0027s namespace. The operator acts as a confused deputy: its ServiceAccount has cluster-wide secret read/write (aiven-operator-role ClusterRole), and it trusts user-supplied namespace values in spec.connInfoSecretSource.namespace without validation. No admission webhook enforces this boundary — the ServiceUser webhook returns nil, and no ClickhouseUser webhook exists. This vulnerability is fixed in 0.37.0.","datePublished":"Apr 9, 2026, 5:14:07 PM","dateUpdated":"Apr 10, 2026, 2:08:22 PM","status":"PUBLISHED","baseScore":6.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","references":"https://github.com/aiven/aiven-operator/security/advisories/GHSA-99j8-wv67-4c72\nhttps://github.com/aiven/aiven-operator/commit/032c9ba63257fdd2fddfb7f73f71830e371ff182\nhttps://github.com/aiven/aiven-operator/releases/tag/v0.37.0\n","enisa_id":"EUVD-2026-20965\n","assigner":"GitHub_M","epss":0.4,"dataProcessed":"Oct 27, 2026, 7:13:18 AM","vulnerabilityProduct":[{"id":"bd7319e9-3d2b-3dfa-8ac7-c1d7d018fbb2","product":{"name":"aiven-operator","vendor":{"name":"aiven"}},"product_version":"\u003c 0.37.0"}],"vulnerabilityVendor":[{"id":"3cb1c00c-cbfd-3a79-a409-b70be737c3b1","vendor":{"name":"aiven"}}]}},{"id":"be153a54-7423-3db3-a59b-5799b37a6bc5","vulnerability":{"id":"GHSA-99j8-wv67-4c72","description":"Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource","datePublished":"Apr 10, 2026, 5:22:00 PM","dateUpdated":"Apr 10, 2026, 5:22:00 PM","baseScore":0.0,"references":"https://github.com/aiven/aiven-operator/security/advisories/GHSA-99j8-wv67-4c72\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-39961\nhttps://github.com/aiven/aiven-operator/commit/032c9ba63257fdd2fddfb7f73f71830e371ff182\nhttps://github.com/aiven/aiven-operator\nhttps://github.com/aiven/aiven-operator/releases/tag/v0.37.0\n","enisa_id":"EUVD-2026-20965\n","aliases":"GHSA-99j8-wv67-4c72\nCVE-2026-39961\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}