{"id":"EUVD-2026-30331","enisaUuid":"90360d52-bbc9-3e29-beda-990380040006","description":"Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail\u0027s dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A malicious web page visited by a user with an active Kubetail session could open a WebSocket to the user\u0027s dashboard and read their Kubernetes logs in real time. This is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability and affects both the desktop deployment (default http://localhost:7500) and cluster deployments (typically behind an Ingress with HTTP basic auth). This vulnerability is fixed in 0.14.0.","datePublished":"May 14, 2026, 4:20:11 PM","dateUpdated":"May 16, 2026, 12:39:44 AM","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","references":"https://github.com/kubetail-org/kubetail/security/advisories/GHSA-v8j7-hp7c-738f\n","aliases":"CVE-2026-44514\nGHSA-v8j7-hp7c-738f\n","assigner":"GitHub_M","epss":0.17,"enisaIdProduct":[{"id":"53261a01-6be8-325a-9035-481a00195b46","product":{"name":"github.com/kubetail-org/kubetail/modules/cli","vendor":{"name":"kubetail-org"}},"product_version":"\u003c 0.16.0"},{"id":"5bf274d9-a49f-3b1e-babe-2e7c735828fb","product":{"name":"github.com/kubetail-org/kubetail/modules/dashboard","vendor":{"name":"kubetail-org"}},"product_version":"\u003c 0.14.0"},{"id":"7c28c481-4f24-3f0e-81ec-5a5366b3ba0b","product":{"name":"kubetail","vendor":{"name":"kubetail-org"}},"product_version":"\u003c 0.14.0"}],"enisaIdVendor":[{"id":"d511b7c2-d026-395e-a9aa-951051099eb6","vendor":{"name":"kubetail-org"}}],"enisaIdVulnerability":[{"id":"956d898e-4cc7-3690-85bd-6f5324736b8d","vulnerability":{"id":"CVE-2026-44514","description":"Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail\u0027s dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A malicious web page visited by a user with an active Kubetail session could open a WebSocket to the user\u0027s dashboard and read their Kubernetes logs in real time. This is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability and affects both the desktop deployment (default http://localhost:7500) and cluster deployments (typically behind an Ingress with HTTP basic auth). This vulnerability is fixed in 0.14.0.","datePublished":"May 14, 2026, 4:20:11 PM","dateUpdated":"May 16, 2026, 12:39:44 AM","status":"PUBLISHED","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","references":"https://github.com/kubetail-org/kubetail/security/advisories/GHSA-v8j7-hp7c-738f\n","enisa_id":"EUVD-2026-30331\n","assigner":"GitHub_M","epss":0.17,"dataProcessed":"Oct 28, 2026, 7:17:27 AM","vulnerabilityProduct":[{"id":"03e46356-2e51-3199-8b39-f2152d9e0c96","product":{"name":"kubetail","vendor":{"name":"kubetail-org"}},"product_version":"\u003c 0.14.0"},{"id":"31d1a65d-8197-3bce-8e23-c541455c71c5","product":{"name":"github.com/kubetail-org/kubetail/modules/cli","vendor":{"name":"kubetail-org"}},"product_version":"\u003c 0.16.0"},{"id":"6063ae56-504a-30b0-bab8-996b83a0adc8","product":{"name":"github.com/kubetail-org/kubetail/modules/dashboard","vendor":{"name":"kubetail-org"}},"product_version":"\u003c 0.14.0"}],"vulnerabilityVendor":[{"id":"10cc1c95-c5f7-3f2a-93fa-14515722eb7b","vendor":{"name":"kubetail-org"}}]}},{"id":"eb2adf3e-b4f2-39ba-b699-eac2cc2c0056","vulnerability":{"id":"GHSA-v8j7-hp7c-738f","description":"Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users","datePublished":"May 7, 2026, 2:34:32 AM","dateUpdated":"May 14, 2026, 8:54:00 PM","baseScore":0.0,"references":"https://github.com/kubetail-org/kubetail/security/advisories/GHSA-v8j7-hp7c-738f\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44514\nhttps://github.com/kubetail-org/kubetail\n","enisa_id":"EUVD-2026-30331\n","aliases":"CVE-2026-44514\nGHSA-v8j7-hp7c-738f\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}