Executive brief
Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources in github.com/zxh326/kite
Affected products
- Go github.com/zxh326/kite
Junglewise Threat Intelligence
GO-2026-6105 - Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources in github.com/zxh326/kite
Severity: info · Published 2026-08-18
Technologies: github.com/zxh326/kite (Go). Vendors: Go.
Related threats
- Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request `/api/v1/overview` for a cluster
- Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources
- Kite Kubernetes proxy path traversal in API endpoints