Chaos-Mesh
Vulnerability activity for Chaos-Mesh: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 9.8CriticalSep 15, 2025Chaos-Mesh chaos mesh Code / command injectionCVE-2025-59361The cleanIptables mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.3.4% likely
- 9.8CriticalSep 15, 2025Chaos-Mesh chaos mesh Code / command injectionCVE-2025-59360The killProcesses mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.2.9% likely
- 9.8CriticalSep 15, 2025Chaos-Mesh chaos mesh Code / command injectionCVE-2025-59359The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.3% likelyExploit code
- 7.5HighSep 15, 2025Chaos-Mesh chaos mesh Auth bypass / access controlCVE-2025-59358The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service.
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.