fabedge has insecure permissions

CRÍTICO 9.8CVE-2024-36536 · GHSA-c9cm-5j82-m6pj · GO-2024-3027 · Published 24/07/2024 · updated 17/06/2026

En resumen

CVE-2024-36536 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a github.com/fabedge/fabedge, fabedge (fabedge).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.48%, mayor que el 41.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
github.com/fabedge/fabedge Go	`≤ 0.8.1all versions`	No fix yet
fabedge fabedge	`= 0.8.1`	No fix yet

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

NVD description

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.