Executive brief
Inspektor Gadget: Command Injection via malicious buildOptions manipulation in github.com/inspektor-gadget/inspektor-gadget
Affected products
- Go github.com/inspektor-gadget/inspektor-gadget
Junglewise Threat Intelligence
CVE-2026-24905: GO-2026-5211 - Inspektor Gadget: Command Injection via malicious buildOptions manipulation in github.com/inspektor-gadget/inspektor-gadget
CVE-2026-24905 · Severity: medium · CVSS 4 · Published 2026-06-25
Technologies: github.com/inspektor-gadget/inspektor-gadget (Go). Vendors: Go.
Related threats
- Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
- Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
- Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode
- GO-2025-3665 - Inspektor Gadget Security Policies Can be Bypassed in github.com/inspektor-gadget/inspektor-gadget
- Inspektor Gadget Security Policies Can be Bypassed