CVE-2026-62845

{
  "id": "CVE-2026-62845",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-30T22:16:55.457",
  "lastModified": "2026-10-23T22:10:00.160",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have no format validation, so a value containing a quote character breaks out of the quoted identifier — SQL injection executed over Kamaji's root connection to the shared datastore. etcd driver is not affected.This issue is fixed in version 26.7.4-edge."
    },
    {
      "lang": "es",
      "value": "Kamaji es el Gestor de Plano de Control Alojado para Kubernetes. Antes de la versión 26.7.4-edge, los controladores de almacén de datos de PostgreSQL y MySQL construyen sentencias DDL interpolando el DataStoreUsername/DataStoreSchema proporcionado por el usuario directamente en SQL a través de fmt.Sprintf, sin escapar identificadores. Estos campos no tienen validación de formato, por lo que un valor que contenga un carácter de comilla simple se sale del identificador entre comillas simples - inyección SQL ejecutada a través de la conexión raíz de Kamaji al almacén de datos compartido. El controlador etcd no se ve afectado. Este problema está solucionado en la versión 26.7.4-edge."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "clastix",
          "product": "kamaji",
          "versions": [
            {
              "version": "< 26.6.4-edge",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
          "baseScore": 4.7,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 3.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-31T11:18:37.166360Z",
          "id": "CVE-2026-62845",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/clastix/kamaji/commit/6a9f3e10ae408e7948e2aca2db694791a299e79c",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/clastix/kamaji/releases/tag/26.7.4-edge",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/clastix/kamaji/security/advisories/GHSA-r47v-ppwp-fh4r",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/clastix/kamaji/security/advisories/GHSA-r47v-ppwp-fh4r",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}