CVE-2026-112047Published
OneUptime 14.0.2 before 14.0.69 Incorrect Authorization in Kubernetes AI Actions
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-112047 · Microsoft / collected KEV context
cve-program · CVE-2026-112047
- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-8fph-9j9f-xxgc
- https://github.com/OneUptime/oneuptime/commit/264e1ba13149cbd4c80cb22f2177b405886b0452
- https://github.com/OneUptime/oneuptime/releases/tag/14.0.69
- https://github.com/OneUptime/oneuptime/blob/14.0.68/packages/Common/Server/API/KubernetesClusterAiAccessAPI.ts#L188-L207
- https://www.vulncheck.com/advisories/oneuptime-14.0.2-before-14.0.69-incorrect-authorization-in-kubernetes-ai-actions
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.