Vulnerability details
CVE-2026-39429
kcp-dev kcp
kcp's cache server is accessible without authentication or authorization checks
CVSS 3.1
8.2High
Official description
kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.30.3 and 0.29.3, the cache server is directly exposed by the root shard and has no authentication or authorization in place. This allows anyone who can access the root shard to read and write to the cache server. This vulnerability is fixed in 0.30.3 and 0.29.3.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.2High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| kcp-dev | kcp | < 0.29.3 | CVEProject cvelistV5 (CNA) |
| kcp-dev | kcp | >= 0.30.0, < 0.30.3 | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://github.com/kcp-dev/kcp/security/advisories/GHSA-3j3q-wp9x-585p x_refsource_CONFIRM
- https://github.com/kcp-dev/kcp/releases/tag/v0.29.3 x_refsource_MISC
- https://github.com/kcp-dev/kcp/releases/tag/v0.30.3 x_refsource_MISC
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-04-08
- Last updated
- 2026-04-11
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.44%
Probability of exploitation in 30 days
38.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-862Missing Authorization
- CWE-302Authentication Bypass by Assumed-Immutable Data