CVE-2026-59269

{
  "id": "CVE-2026-59269",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-09T08:16:49.093",
  "lastModified": "2026-10-25T17:10:00.197",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially gain elevated permissions in the clusters, only if all the following conditions were true: the Pinniped Supervisor server is running with an ActiveDirectoryIdentityProvider resource configured; the ActiveDirectoryIdentityProvider.spec.groupSearch.attributes.groupName is empty; the attacker gains the ability to edit some part of the distinguished name (DN) of group entries in the Active Directory (AD) server's database for groups to which they belong; the configured group search parameters cause the edited group to be included in the group search results for the user; and the attacker knows the password for an AD user who belongs to the edited AD group.\nAffected versions: Pinniped (go.pinniped.dev) v0.11.0 through v0.46.0 inclusive; fixed in v0.47.0."
    },
    {
      "lang": "es",
      "value": "Un usuario que se autentica en clústeres de Kubernetes a través del Supervisor de Pinniped podría obtener permisos elevados en los clústeres, solo si se cumplieran todas las siguientes condiciones: el servidor del Supervisor de Pinniped está ejecutándose con un recurso ActiveDirectoryIdentityProvider configurado; el ActiveDirectoryIdentityProvider.spec.groupSearch.attributes.groupName está vacío; el atacante obtiene la capacidad de editar alguna parte del nombre distinguido (DN) de las entradas de grupo en la base de datos del servidor de Active Directory (AD) para los grupos a los que pertenece; los parámetros de búsqueda de grupo configurados hacen que el grupo editado se incluya en los resultados de búsqueda de grupo para el usuario; y el atacante conoce la contraseña de un usuario de AD que pertenece al grupo de AD editado.\nVersiones afectadas: Pinniped (go.pinniped.dev) v0.11.0 hasta v0.46.0 inclusive; corregido en v0.47.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "VMware",
          "product": "Pinniped",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.11.0",
              "lessThanOrEqual": "0.46.0",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
          "baseScore": 3.8,
          "baseSeverity": "LOW",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 2.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-09T12:45:32.426360Z",
          "id": "CVE-2026-59269",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "references": [
    {
      "url": "https://github.com/vmware/pinniped/security/advisories/GHSA-7xq8-m6h6-2xg8",
      "source": "[email protected]"
    }
  ]
}