CVE-2026-54369

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.4; base score, highest
EPSS: 0.002; 5th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,582; of 17,828 indexed, latest versions
Container images: 2,590; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: acl security update

Carried by container images the latest versions of 2,582 of 17,828 indexed charts deploy, on 2,590 images.

Affected package	Affected versions	Fixed in	Images
acldeb	2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more	2.4.0-1	2,548
aclrpm	2.3.1-2.azl3, 2.3.1-3.el9, 2.3.1-4.el9	0:2.4.0-0.el9_2.1, 0:2.4.0-0.el9_4.1, 0:2.4.0-0.el9_6.1, 2.4.0-1	42

OSV records: DEBIAN-CVE-2026-54369 RHSA-2026:67140 RHSA-2026:67142 RHSA-2026:67144 UBUNTU-CVE-2026-54369 AZL-91397 ECHO-b5ce-94bd-9b5b

Charts affected

2,582 by stars

Chart

Latest

Affected images

Radar Score

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	acl@2.3.1-1	no fix listed
openebs/node-disk-operator :2.1.0	6afe2123c457	acl@2.3.1-1	no fix listed

Open the chart page →

10,677

reflectorwenerme

10.0.65

1 of 1 See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
emberstack/kubernetes-reflector :10.0.65	51dbd5880929	acl@2.3.2-1build1.1	no fix listed

Open the chart page →

746

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	acl@2.3.1-3	no fix listed

Open the chart page →

13,047

wikiwikijs

3.0.0

1 of 2 See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/postgres :18	4ef4dbc939d6	acl@2.3.2-2+b1	no fix listed

Open the chart page →

5,540

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	acl@2.3.1-1	no fix listed

Open the chart page →

9,398

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	acl@2.3.2-1build1.1	no fix listed

Open the chart page →

2,309

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	acl@2.3.1-3	no fix listed
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	acl@2.3.1-3	no fix listed

Open the chart page →

7,783

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	acl@2.2.53-6	no fix listed

Open the chart page →

6,406

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	acl@2.3.1-3	no fix listed

Open the chart page →

5,582

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	acl@2.3.1-3	no fix listed

Open the chart page →

2,523

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	acl@2.3.1-3	no fix listed

Open the chart page →

2,167

wordpress-alpinewordpress-alpine

1.5.18

2 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	acl@2.3.2-1build1.1	no fix listed
library/memcached :1.6.45	dc561d52bb8a	acl@2.3.2-2+b1	no fix listed

Open the chart page →

4,153

Wordpresswordpress-mariadb

1.0.2

2 of 2 See more

Wordpress wordpress-mariadb 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/mariadb :lts	dd9b303aed4f	acl@2.3.2-1build1.1	no fix listed
library/wordpress :latest	5a93c470ae82	acl@2.3.2-2+b1	no fix listed

Open the chart page →

5,779

wordpresswordpress-ng

1.0.9

1 of 2 See more

wordpress wordpress-ng 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
cloudtooling/wordpress :7.1.1	db89d95f1d14	acl@2.3.1-3	no fix listed

Open the chart page →

3,969

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	acl@2.3.1-1	no fix listed

Open the chart page →

14,298

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	acl@2.3.1-3	no fix listed

Open the chart page →

11,660

am-pattern-1wso2

2.6.0-7

2 of 6 See more

am-pattern-1 wso2 2.6.0-7

2 of the 6 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
wso2/wso2am :2.6.0	fbe0f4059b74	acl@2.2.53-6	no fix listed
wso2/wso2am-analytics-worker :2.6.0	05fa15b3d927	acl@2.2.52-3build1	no fix listed

Open the chart page →

31,730

tabbyxd

1.0.6

1 of 2 See more

7,751

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	acl@2.3.1-3	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	acl@2.3.1-3	no fix listed
library/mongo :latest	5211c51171f5	acl@2.3.2-1build1.1	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	acl@2.3.1-3	no fix listed

Open the chart page →

13,934

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	acl@2.3.2-1build1	no fix listed

Open the chart page →

2,189

cloudeye-exporterxxl-job-admin

0.1.2

1 of 1 See more

cloudeye-exporter xxl-job-admin 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
dellnoantechnp/cloudeye-exporter :v2.0.31	6873356c882d	acl@2.3.1-3	no fix listed

Open the chart page →

2,695

dingtalk-botxxl-job-admin

0.1.2

1 of 2 See more

dingtalk-bot xxl-job-admin 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
dellnoantechnp/dingtalk-bot :v1.0.1	034000bbcad5	acl@2.3.2-2+b1	no fix listed

Open the chart page →

3,182

nightingalexxl-job-admin

0.2.11

3 of 6 See more

nightingale xxl-job-admin 0.2.11

3 of the 6 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	acl@2.3.2-1build1.1	no fix listed
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	acl@2.3.1-3	no fix listed
library/redis :6.2	d2ad7b21cafa	acl@2.3.1-3	no fix listed

Open the chart page →

9,769

pgcatxxl-job-admin

0.3.3

1 of 1 See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	acl@2.3.1-3	no fix listed

Open the chart page →

3,193

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	acl@2.3.2-2+b1	no fix listed

Open the chart page →

1,589

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	acl@2.3.2-2+b1	no fix listed

Open the chart page →

1,336

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	acl@2.3.2-2+b1	no fix listed

Open the chart page →

1,965

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	acl@2.3.1-3	no fix listed

Open the chart page →

2,709

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	acl@2.3.1-3	no fix listed

Open the chart page →

2,701

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	acl@2.3.2-2+b1	no fix listed

Open the chart page →

1,589

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	acl@2.2.52-3build1	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	acl@2.2.53-6	no fix listed

Open the chart page →

9,340

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-54369.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	acl@2.3.1-1	no fix listed

Open the chart page →

8,105

Container images carrying it

2,590 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
solarwinds/solarwinds-otel-collector :0.152.3-k8s	3c1110e8bdfb	acl@2.3.1-3	no fix listed	1
soldevelo/kafka :4.0.0-debian-12-r0	cfdc08c2f577	acl@2.3.1-3	no fix listed	1
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	acl@2.3.1-3	no fix listed	1
soldevelo/postgresql-repmgr :17.6.0-debian-12-r0	3eaab21e40e5	acl@2.3.1-3	no fix listed	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	acl@2.2.53-6	no fix listed	1
somnathmore/custom-nginx :v2	bdfc06cad4ec	acl@2.3.1-3	no fix listed	1
sondresjo/altinnendata-api :v1.8.1	d90ca67f028d	acl@2.3.2-1build1.1	no fix listed	1
sondresjo/altinnendata-app :v1.9.2	caa49ba0d92a	acl@2.3.2-2+b1	no fix listed	1
sondresjo/bobby-api :latest	fe534731909a	acl@2.3.1-3	no fix listed	1
sondresjo/garge-api :v2.12.7	62dfd5c9b2e4	acl@2.3.2-1build1.1	no fix listed	1
sondresjo/garge-app :v1.20.8	61bc5b249b62	acl@2.3.2-2+b1	no fix listed	1
sondresjo/garge-operator :v1.9.5	c17f4ecd1adf	acl@2.3.2-1build1.1	no fix listed	1
sondresjo/nstuning-api :v1.6.12	ca4e311d2712	acl@2.3.2-1build1.1	no fix listed	1
sondresjo/nstuning-app :v1.6.12	49cb4535a2fd	acl@2.3.2-2+b1	no fix listed	1
sondresjo/pyttogpanne-api :v1.0.1	8248b508de68	acl@2.3.2-1build1.1	no fix listed	1
sondresjo/pyttogpanne-app :v1.0.0	ef6ee3d8912c	acl@2.3.2-2+b1	no fix listed	1
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	acl@2.3.2-2+b1	no fix listed	1
speckle/speckle-preview-service :2.26.3	092384dba45d	acl@2.3.1-3	no fix listed	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	acl@2.3.1-3	no fix listed	1
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	acl@2.3.1-3	no fix listed	1
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	acl@2.3.1-3	no fix listed	1
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	acl@2.3.1-3	no fix listed	1
speckle/speckle-preview-service :2.17.14-branch.testing.72707.921a5f8	84fc39bca0c8	acl@2.3.1-3	no fix listed	1
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	acl@2.3.1-3	no fix listed	1
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	acl@2.3.1-3	no fix listed	1
speckle/speckle-preview-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	d3da0a84de98	acl@2.3.1-3	no fix listed	1
speckle/speckle-server :2.17.14-branch.testing.72707.921a5f8	49d10dcdfb91	acl@2.3.1-3	no fix listed	1
speckle/speckle-server :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4b6a0750d5aa	acl@2.3.1-3	no fix listed	1
speckle/speckle-server :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	52f8eabf5cea	acl@2.3.1-3	no fix listed	1
speckle/speckle-server :2.20.2-branch.testing4.134160-9fad4b2	687f43ab16f3	acl@2.3.1-3	no fix listed	1
speckle/speckle-server :2.18.12-branch.testing3.88744-f55b341	89a5872375f9	acl@2.3.1-3	no fix listed	1
speckle/speckle-server :2.18.11-branch.testing2.88634-335d469	bf6a501b2210	acl@2.3.1-3	no fix listed	1
speckle/speckle-server :2.20.6-branch.testing1.154030-9b09114	e8413f57b327	acl@2.3.1-3	no fix listed	1
spy86/rabbitmq-stomp :latest	ea649101b9fb	acl@2.2.53-6	no fix listed	1
sslhep/servicex_app :v1.8.5	1d12f943cec5	acl@2.3.2-2+b1	no fix listed	1
sslhep/servicex_code_gen_atlas_xaod :v1.8.5	e7aff7f97b89	acl@2.3.2-2+b1	no fix listed	1
sslhep/servicex_code_gen_func_adl_uproot :v1.8.5	b01b8ee966ed	acl@2.3.2-2+b1	no fix listed	1
sslhep/servicex_code_gen_python :v1.8.5	0e4175a4e1eb	acl@2.3.2-2+b1	no fix listed	1
sslhep/servicex_code_gen_raw_uproot :v1.8.5	671980005c57	acl@2.3.2-2+b1	no fix listed	1
sslhep/servicex_code_gen_topcp :v1.8.5	596db2abdd09	acl@2.3.2-2+b1	no fix listed	1
sslhep/servicex-did-finder-atlasopenmagic :v1.8.5	54aaf1721d03	acl@2.3.2-2+b1	no fix listed	1
sslhep/servicex-did-finder-cernopendata :v1.8.5	2cb88ceab5bb	acl@2.3.2-2+b1	no fix listed	1
sslhep/servicex-did-finder-xrootd :v1.8.5	c284442b44e3	acl@2.3.2-2+b1	no fix listed	1
stackstorm/st2actionrunner :3.8	88235ba70cad	acl@2.2.53-6	no fix listed	1
stackstorm/st2api :3.8	6f56d239d280	acl@2.2.53-6	no fix listed	1
stackstorm/st2auth :3.8	33ecfda16608	acl@2.2.53-6	no fix listed	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	acl@2.2.53-6	no fix listed	1
stackstorm/st2notifier :3.8	f190a6212195	acl@2.2.53-6	no fix listed	1
stackstorm/st2rulesengine :3.8	259503496ff9	acl@2.2.53-6	no fix listed	1
stackstorm/st2scheduler :3.8	b1de2055c362	acl@2.2.53-6	no fix listed	1