Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-42541 · Microsoft / collected KEV context

EUVD-2026-29707

GHSA-wqcw-g35j-j578

GO-2026-5716

cve-program · CVE-2026-42541

• https://github.com/kubewarden/adm-controller/security/advisories/GHSA-wqcw-g35j-j578

euvd · EUVD-2026-29707

• https://github.com/kubewarden/adm-controller/security/advisories/GHSA-wqcw-g35j-j578

nvd · CVE-2026-42541

• https://github.com/kubewarden/adm-controller/security/advisories/GHSA-wqcw-g35j-j578

osv · GHSA-wqcw-g35j-j578

• https://github.com/kubewarden/adm-controller/security/advisories/GHSA-wqcw-g35j-j578
• https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-wqcw-g35j-j578
• https://nvd.nist.gov/vuln/detail/CVE-2026-42541
• https://github.com/kubewarden/docs/pull/737
• https://github.com/kubewarden/kubewarden-controller/pull/1693
• https://docs.kubewarden.io/howtos/policy-servers/namespaced-policies-capabilities
• https://github.com/kubewarden/kubewarden-controller

osv · GO-2026-5716

• https://github.com/kubewarden/adm-controller/security/advisories/GHSA-wqcw-g35j-j578
• https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-wqcw-g35j-j578
• https://nvd.nist.gov/vuln/detail/CVE-2026-42541
• https://github.com/kubewarden/kubewarden-controller/pull/1693
• https://github.com/kubewarden/docs/pull/737

No related operational record is retained in the current change model.