CVE Intelligence

3scale-sre vulnerabilities

🔔 Create alert RSS

Published CVEs affecting 3scale-sre products: 1 record(s), with severity, exploitation and fixes.

Marin3r 1

Exploited only (KEV) →

CVE-2025-64171 High · 8.7 CWE-862 Nov 5, 2025
MARIN3R: Cross-Namespace Vulnerability in the Operator
MARIN3R is a lightweight, CRD based envoy control plane for kubernetes. In versions 0.13.3 and below, there is a cross-namespace secret access vulnerability in the project's DiscoveryServiceCertificate which allows users to bypass RBAC and access secrets in unauthorized namespaces. This issue is fixed in version 0.13.4.