{"metadata": {"vulnerability": "CVE-2026-105312", "count": 19, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-08-04T01:31:04.894Z", "date_only": false, "value": "2026-08-04T01:31:04.894Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "CVE-2026-105312", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-05T07:03:59.012Z", "date_only": false, "value": "2026-10-05T07:03:59.012Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105312", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-20T11:00:00Z", "date_only": false, "value": "2026-10-20T11:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2026-105312", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-20T11:00:00Z", "date_only": false, "value": "2026-10-20T11:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "CVE-2026-105312", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-20T11:30:20.850Z", "date_only": false, "value": "2026-10-20T11:30:20.850Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105312", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T11:37:45.502Z", "date_only": false, "value": "2026-10-20T11:37:45.502453Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117473035227757409", "record": "CVE-2026-105312", "field": "creation_timestamp", "uuid": "3a3a0252-0e1e-4741-91d5-7dea3c695936", "content": "CVE-2026-105312 Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on all Strimzi CRDs (including KafkaUsers), patch on Kafkas/KafkaRebalances, and cluster-monitoring-view. The attacker's code reads the projected SA token and gains cross-tenant Strimzi control-plane read+write access.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105312https://access.redhat.com/security/cve/CVE-2026-105312https://bugzilla.redhat.com/show_bug.cgi?id=2510863#RedHat #StreamsHubConsoleforApacheKafka\u00ae #streamsforApacheKafka2 #streamsforApacheKafka3#CVE_2026_105312#bot", "url": "https://infosec.exchange/users/cve/statuses/117473035227757409"}, {"timestamp": "2026-10-20T12:00:26.361Z", "date_only": false, "value": "2026-10-20T12:00:26.361482Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117473124395469410", "record": "cve-2026-105312", "field": "creation_timestamp", "uuid": "bfb7ad8b-35a5-4890-ae5e-cdcb370040db", "content": "CVE-2026-105312 (CRITICAL, CVSS 9.9) affects Red Hat StreamsHub Console for Apache Kafka\u00ae. Kubernetes tenants with create permissions can deploy arbitrary images and gain cluster-wide Strimzi access. Restrict permissions & see https://radar.offseq.com/threat/cve-2026-105312-improper-privilege-management-in-red-hat-streamshub-console-for-apache-kafka-875b8cf8f2fb93c8 \ud83d\udee1\ufe0f #OffSeq #RedHat #KafkaSec", "url": "https://infosec.exchange/users/offseq/statuses/117473124395469410"}, {"timestamp": "2026-10-20T12:17:28Z", "date_only": false, "value": "2026-10-20T12:17:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5C9W-JJ2V-89QH", "record": "GHSA-5C9W-JJ2V-89QH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T12:17:28.703Z", "date_only": false, "value": "2026-10-20T12:17:28.703", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105312", "record": "FKIE_CVE-2026-105312", "field": "published"}, {"timestamp": "2026-10-20T12:31:36Z", "date_only": false, "value": "2026-10-20T12:31:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5C9W-JJ2V-89QH", "record": "GHSA-5C9W-JJ2V-89QH", "field": "published"}, {"timestamp": "2026-10-20T12:31:36Z", "date_only": false, "value": "2026-10-20T12:31:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5C9W-JJ2V-89QH", "record": "GHSA-5C9W-JJ2V-89QH", "field": "modified"}, {"timestamp": "2026-10-20T13:38:38.607Z", "date_only": false, "value": "2026-10-20T13:38:38.607997Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117473510395476573", "record": "CVE-2026-105312", "field": "creation_timestamp", "uuid": "e1f31175-6f35-4b4d-8fdb-2feef68f1885", "content": "Hey @Viss \nhttps://nvd.nist.gov/vuln/detail/CVE-2026-105312", "url": "https://infosec.exchange/users/cR0w/statuses/117473510395476573"}, {"timestamp": "2026-10-20T15:16:22.650Z", "date_only": false, "value": "2026-10-20T15:16:22.650365Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105312", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-20T15:16:22.650Z", "date_only": false, "value": "2026-10-20T15:16:22.650365Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105312", "record": "FKIE_CVE-2026-105312", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T16:06:30.224Z", "date_only": false, "value": "2026-10-20T16:06:30.224Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105312", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T17:17:27.860Z", "date_only": false, "value": "2026-10-20T17:17:27.860", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105312", "record": "FKIE_CVE-2026-105312", "field": "lastModified"}, {"timestamp": "2026-10-20T22:33:57.620Z", "date_only": false, "value": "2026-10-20T22:33:57.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105312", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T22:33:57.620Z", "date_only": false, "value": "2026-10-20T22:33:57.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2026-105312", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-25T12:06:09.534Z", "date_only": false, "value": "2026-10-25T12:06:09.534804Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3myp66xcylu2i", "record": "CVE-2026-105312", "field": "creation_timestamp", "uuid": "1b1d5ff3-1a4e-4fe1-b1d9-22e8d6f901c9", "content": "CVE-2026-105312: Red Hat Kafka Console Bug Exposes Control Plane to Untrusted Tenants", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3myp66xcylu2i"}]}