CVE-2026-32720CWE-284

Improper Access Control in github.com/ctfer-io/monitoring

High · published March 13, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e. logs, metrics and distributed traces). Prior to 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other namespace. This breaks the security-by-default property expected as part of the deployment program, leading to a potential lateral movement. This vulnerability is fixed in 0.2.1.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
EPSS
0.00421 · 35.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-03-13T21:27Z
EPSS history
Timeline
  • 13 MAR 21:27Z
    Improper Access Control in github.com/ctfer-io/monitoring
    cvelistv5