{"id":"GO-2026-6142","revision":"472738196a3f44119d74f347ce07d911","records":[{"revision":"472738196a3f44119d74f347ce07d911","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6142","aliases":["CVE-2026-54680","GHSA-mjqf-28ph-426h"],"title":"Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator","description":"Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator","state":0,"publishedAt":"2026-08-18T14:32:29+00:00","modifiedAt":"2026-08-18T15:00:23.1699677+00:00","affected":[{"ecosystem":"Go","name":"github.com/kube-logging/logging-operator","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260608145523-cf437d7f1e05"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h","https://github.com/kube-logging/logging-operator/commit/cf437d7f1e056c78740bf5716ac8bdebcf002425","https://github.com/kube-logging/logging-operator/releases/tag/6.6.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6142","license":"OSV · upstream source license applies","key":"osv:GO-2026-6142","identifiers":["GO-2026-6142","CVE-2026-54680","GHSA-mjqf-28ph-426h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}