Executive brief
Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources
Affected products
- Go github.com/zxh326/kite
Junglewise Threat Intelligence
Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources
Severity: low · CVSS 3.1 · Published 2026-07-24
Technologies: github.com/zxh326/kite (Go). Vendors: Go.
Related threats
- Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request `/api/v1/overview` for a cluster
- GO-2026-6105 - Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources in github.com/zxh326/kite
- Kite Kubernetes proxy path traversal in API endpoints