osac-project CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH osac-project CVE published 2026-11-06

CVE-2026-62284

CVE-2026-62284 debrief: The OSAC operator's console-proxy is vulnerable to remote code execution and server-side request forgery due to improper handling of kubeconfig data. Affected deployments using remote or auto VM cluster mode require immediate patching. The vulnerability allows an attacker to execute arbitrary code inside the console-proxy pod by creating or modifying a Secret with a specific label [truncated]