CVE-2026-54369

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.4; base score, highest
EPSS: 0.002; 5th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,479; of 17,803 indexed, latest versions
Container images: 2,450; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: acl security update

Carried by container images the latest versions of 2,479 of 17,803 indexed charts deploy, on 2,450 images.

Affected package	Affected versions	Fixed in	Images
acldeb	2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more	2.4.0-1	2,406
aclrpm	2.3.1-2.azl3, 2.3.1-3.el9, 2.3.1-4.el9	0:2.4.0-0.el9_2.1, 0:2.4.0-0.el9_4.1, 0:2.4.0-0.el9_6.1, 2.4.0-1	44

OSV records: DEBIAN-CVE-2026-54369 RHSA-2026:67140 RHSA-2026:67142 RHSA-2026:67144 UBUNTU-CVE-2026-54369 AZL-91397 ECHO-b5ce-94bd-9b5b

Charts affected

2,479 by stars

Chart

Latest

Affected images

Radar Score

kubernetes-dashboardwenerme

7.14.0

1 of 5 See more

kubernetes-dashboard wenerme 7.14.0

1 of the 5 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/kong :3.9	2a8cf3b110cd	acl@2.3.2-1build1.1	no fix listed

Open the chart page →

3,536

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	acl@2.2.53-6	no fix listed

Open the chart page →

15,310

mesherywenerme

1.0.70

1 of 1 See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	44b64ee128fb	acl@2.3.1-3	no fix listed

Open the chart page →

1,445

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	acl@2.3.1-1	no fix listed
openebs/node-disk-operator :2.1.0	6afe2123c457	acl@2.3.1-1	no fix listed

Open the chart page →

10,602

reflectorwenerme

10.0.65

1 of 1 See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
emberstack/kubernetes-reflector :10.0.65	51dbd5880929	acl@2.3.2-1build1.1	no fix listed

Open the chart page →

711

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	acl@2.3.1-3	no fix listed

Open the chart page →

15,056

wikiwikijs

3.0.0

1 of 2 See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/postgres :18	4ef4dbc939d6	acl@2.3.2-2+b1	no fix listed

Open the chart page →

5,497

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	acl@2.3.1-1	no fix listed

Open the chart page →

9,340

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	acl@2.3.2-1build1.1	no fix listed

Open the chart page →

2,242

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	acl@2.3.1-3	no fix listed
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	acl@2.3.1-3	no fix listed

Open the chart page →

7,687

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	acl@2.2.53-6	no fix listed

Open the chart page →

6,336

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	acl@2.3.1-3	no fix listed

Open the chart page →

5,566

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	acl@2.3.1-3	no fix listed

Open the chart page →

2,500

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	acl@2.3.1-3	no fix listed

Open the chart page →

2,143

wordpress-alpinewordpress-alpine

1.5.18

2 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	acl@2.3.2-1build1.1	no fix listed
library/memcached :1.6.45	dc561d52bb8a	acl@2.3.2-2+b1	no fix listed

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

2 of 2 See more

Wordpress wordpress-mariadb 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/mariadb :lts	dd9b303aed4f	acl@2.3.2-1build1.1	no fix listed
library/wordpress :latest	5a93c470ae82	acl@2.3.2-2+b1	no fix listed

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	acl@2.3.1-1	no fix listed

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	acl@2.3.1-3	no fix listed

Open the chart page →

11,622

tabbyxd

1.0.6

1 of 2 See more

7,714

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	acl@2.3.1-3	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	acl@2.3.1-3	no fix listed
library/mongo :latest	5211c51171f5	acl@2.3.2-1build1.1	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	acl@2.3.1-3	no fix listed

Open the chart page →

13,813

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	acl@2.3.2-1build1	no fix listed

Open the chart page →

2,152

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	acl@2.3.2-2+b1	no fix listed

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	acl@2.3.2-2+b1	no fix listed

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	acl@2.3.2-2+b1	no fix listed

Open the chart page →

1,861

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	acl@2.3.1-3	no fix listed

Open the chart page →

2,692

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	acl@2.3.1-3	no fix listed

Open the chart page →

—

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	acl@2.3.2-2+b1	no fix listed

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	acl@2.2.52-3build1	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	acl@2.2.53-6	no fix listed

Open the chart page →

9,272

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	acl@2.3.1-1	no fix listed

Open the chart page →

7,936

Container images carrying it

2,450 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/nginx :1.27.1	934d1acd5ca8	acl@2.3.1-3	no fix listed	1
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	acl@2.3.1-3	no fix listed	1
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	acl@2.3.1-3	no fix listed	1
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	acl@2.3.1-3	no fix listed	1
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	acl@2.3.1-3	no fix listed	1
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	acl@2.3.1-3	no fix listed	1
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	acl@2.3.1-3	no fix listed	1
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	acl@2.3.1-3	no fix listed	1
bitnamilegacy/pgbouncer :1.23.1	92356da09704	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :16.4.0-debian-12-r11	02e2f47a405e	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :16.3.0-debian-12-r4	3332e81afb4f	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :16.4.0	3ba6e6f11388	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :17.5.0-debian-12-r16	687034f33da6	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :17.5.0-debian-12-r12	85198aae0aed	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :16.3.0-debian-12-r14	cc55da2fa366	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :17.2.0-debian-12-r5	cf63048c9209	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :17.2.0-debian-12-r2	e6fa49bb0347	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	acl@2.3.1-3	no fix listed	1
bitnamilegacy/postgresql :16.3.0-debian-12-r15	fdc6979dbc53	acl@2.3.1-3	no fix listed	1
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	acl@2.3.1-3	no fix listed	1
bitnamilegacy/rabbitmq :4.1.2-debian-12-r0	74a3d7c747eb	acl@2.3.1-3	no fix listed	1
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis :8.0.3-debian-12-r1	189aae381e7f	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis :8.0.2-debian-12-r4	cdc2efa9c306	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis-cluster :7.4.3-debian-12-r0	a53d023fdfaf	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis-exporter :1.69.0-debian-12-r1	a006df1fd47e	acl@2.3.1-3	no fix listed	1
bitnamilegacy/redis-sentinel :8.2.1-debian-12-r0	0ca3ea1d2f82	acl@2.3.1-3	no fix listed	1
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	acl@2.3.1-3	no fix listed	1
bitnamilegacy/valkey :latest	0384ca2eec63	acl@2.3.1-3	no fix listed	1
bitnamilegacy/valkey :8.1.3-debian-12-r3	4f0191fba7d3	acl@2.3.1-3	no fix listed	1
bitnamilegacy/valkey :8.1.3-debian-12-r1	a185655855b3	acl@2.3.1-3	no fix listed	1
bitnami/mariadb :11.7.2	16a7dae804fb	acl@2.3.1-3	no fix listed	1
bitnami/memcached :1.6.38	dd8f2cba9a5b	acl@2.3.1-3	no fix listed	1
bitnami/minideb :latest	835e5f8392c3	acl@2.3.2-2+b1	no fix listed	1
bitnami/mongodb :8.0.8	b3bd5b6be9a0	acl@2.3.1-3	no fix listed	1
bitnami/redis :7.4.2	4e65bf641805	acl@2.3.1-3	no fix listed	1
blackducksoftware/bdba-fluentd :2026.6.3	c14bbbf45536	acl@2.3.2-2+b1	no fix listed	1
blackducksoftware/bdba-frontend :2026.6.3	b10eaea94fd3	acl@2.3.2-2+b1	no fix listed	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	acl@2.2.53-6	no fix listed	1
blockstream/bitcoind :27.2	9472492530e3	acl@2.3.1-3	no fix listed	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	acl@2.3.1-3	no fix listed	1