CVE-2026-82473 kubeedge CVE debrief

Who should care

Organizations using KubeEdge CloudCore through version 1.23.1, particularly those with cloud-based or edge computing environments, should be aware of this vulnerability and take steps to mitigate it. Affected operators, platforms, and security teams should review their inventory, assess exposure, and plan remediation efforts. Vulnerability management and security teams should track exceptions, retest remediated assets, and close the item only after evidence is documented.

Technical summary

KubeEdge CloudCore through version 1.23.1 has an authentication bypass vulnerability in its node task status reporting mechanism. The CloudCore HTTPS server accepts node task status reports without verification, allowing attackers to manipulate upgrade job status on port 10002. This could deceive the control plane about node upgrade status and block further upgrade scheduling. Affected organizations should review compensating controls for exposed systems while remediation is scheduled and verified.

Defensive priority

Organizations using KubeEdge CloudCore through version 1.23.1 should verify their inventory and assess exposure to unprotected node task status reporting endpoints.

Recommended defensive actions

• Verify KubeEdge CloudCore inventory and assess exposure to unprotected node task status reporting endpoints
• Implement authentication and authorization for node task status reports
• Restrict access to CloudCore on port 10002
• Monitor for suspicious activity on node upgrade status reporting
• Apply vendor remediation when available

Evidence notes

The CVE description indicates KubeEdge CloudCore through 1.23.1 accepts node task status reports without authentication on its HTTPS server, allowing attackers to mark upgrade jobs as succeeded or failed on port 10002. Organizations should verify their inventory and assess exposure to unprotected node task status reporting endpoints. Evidence is limited to the CVE description and official references. Defenders should verify affected product deployments, review official advisories, and plan vendor-supported updates or mitigations.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.