CVE-2026-114278 - Unauthenticated Command Injection via kubeconfig Username in che-machine-exec
CVE ID :CVE-2026-114278 Published : Oct. 28, 2026, 11:55 a.m. | 29 minutes ago Description :The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpoints) into a...