StackRadar

CVE-2026-54369

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,538
of 17,805 indexed, latest versions
Container images
2,512
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: acl security update

Carried by container images the latest versions of 2,538 of 17,805 indexed charts deploy, on 2,512 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,468
aclrpm2.3.1-2.azl3, 2.3.1-3.el9, 2.3.1-4.el90:2.4.0-0.el9_2.1, 0:2.4.0-0.el9_4.1, 0:2.4.0-0.el9_6.1, 2.4.0-144
OSV records
DEBIAN-CVE-2026-54369RHSA-2026:67140RHSA-2026:67142RHSA-2026:67144UBUNTU-CVE-2026-54369AZL-91397ECHO-b5ce-94bd-9b5b

Charts affected

2,538 by stars
ChartLatestAffected imagesRadar Score
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
acl@2.3.1-1
no fix listed
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
acl@2.3.1-1
no fix listed

Open the chart page →

4,563
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
acl@2.3.1-3
no fix listed

Open the chart page →

5,080
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
acl@2.2.53-6
no fix listed

Open the chart page →

91,475
redislsst-sqre1.2.11 of 1See more

redis lsst-sqre 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,006
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/redis:6.2143f7bfc2358
acl@2.3.1-3
no fix listed

Open the chart page →

6,670
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
acl@2.2.52-3build1
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
acl@2.2.52-3build1
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
acl@2.2.52-3build1
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
acl@2.2.52-3build1
no fix listed

Open the chart page →

58,350
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
acl@2.3.1-3
no fix listed

Open the chart page →

27,857
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest7f9a1d574958
acl@2.3.2-2
no fix listed

Open the chart page →

876
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
acl@2.3.2-2+b1
no fix listed

Open the chart page →

4,720
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,661
kea-exporterm0nsterrr-kea-exporterVerified publisher2.2.11 of 1See more

kea-exporter m0nsterrr-kea-exporter 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,095
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
acl@2.3.1-3
no fix listed

Open the chart page →

9,854
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
acl@2.3.1-1
no fix listed
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
acl@2.3.1-1
no fix listed

Open the chart page →

24,770
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
acl@2.3.1-3
no fix listed

Open the chart page →

11,547
demoshopmakaira2.4.02 of 4See more

demoshop makaira 2.4.0

2 of the 4 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
acl@2.3.2-2+b1
no fix listed
library/php:8.4-fpm59fa733c9af6
acl@2.3.2-2+b1
no fix listed

Open the chart page →

4,575
plane-mcp-servermakeplaneVerified publisher1.0.02 of 2See more

plane-mcp-server makeplane 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
acl@2.3.2-2+b1
no fix listed
valkey/valkey:9.1.164e361b630ec
acl@2.3.2-2+b1
no fix listed

Open the chart page →

2,652
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
acl@2.3.1-3
no fix listed

Open the chart page →

7,388
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,622
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
acl@2.2.53-6
no fix listed

Open the chart page →

4,172
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,885
mauticmautic-chartVerified publisher1.0.22 of 3See more

mautic mautic-chart 1.0.2

2 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
acl@2.3.1-3
no fix listed
mautic/mautic:7-apacheeb8cc73d97e1
acl@2.3.1-3
no fix listed

Open the chart page →

8,495
mayastormayastorVerified publisher2.12.12 of 31See more

mayastor mayastor 2.12.1

2 of the 31 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
acl@2.3.2-1build1.1
no fix listed
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
acl@2.3.1-3
no fix listed

Open the chart page →

21,418
eoloplantmca-eoloplaner0.1.03 of 7See more

eoloplant mca-eoloplaner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
acl@2.2.53-6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
acl@2.2.53-6
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
acl@2.3.1-1
no fix listed

Open the chart page →

29,884
mcp-hangarmcp-hangarVerified publisher0.15.221 of 1See more

mcp-hangar mcp-hangar 0.15.22

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/mcp-hangar/mcp-hangar:2.21.0ee409f91176c
acl@2.3.2-2+b1
no fix listed

Open the chart page →

857
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
acl@2.3.1-3
no fix listed

Open the chart page →

4,102
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
acl@2.3.1-3
no fix listed

Open the chart page →

10,631
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
acl@2.3.1-3
no fix listed

Open the chart page →

5,700
mcpomcp-helmVerified publisher0.2.81 of 1See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
acl@2.3.1-3
no fix listed

Open the chart page →

4,597
mcp-playwrightmcp-helmVerified publisher0.1.11 of 1See more

mcp-playwright mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
acl@2.3.1-3
no fix listed

Open the chart page →

4,160
searchmcp-helmVerified publisher0.1.31 of 2See more

search mcp-helm 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
acl@2.3.1-3
no fix listed

Open the chart page →

8,326
mcroutermcrouterVerified publisher0.2.02 of 2See more

mcrouter mcrouter 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
library/memcached:1.6.4226983a43c918
acl@2.3.2-2+b1
no fix listed
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,359
backstagemcwarmanVerified publisher0.10.102 of 2See more

backstage mcwarman 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
acl@2.3.2-2+b1
no fix listed
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
acl@2.3.1-3
no fix listed

Open the chart page →

9,831
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/valkey:9.0.159c7e728fb3a
acl@2.3.2-2+b1
no fix listed

Open the chart page →

4,926
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
acl@2.3.2-2+b1
no fix listed

Open the chart page →

3,860
cleanuparrmedia-servarrVerified publisher0.19.21 of 1See more

cleanuparr media-servarr 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.68136c3beda7a
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

1,460
flaresolverrmedia-servarrVerified publisher0.18.21 of 1See more

flaresolverr media-servarr 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
acl@2.3.1-3
no fix listed

Open the chart page →

6,714
tinymediamanagermedia-servarrVerified publisher1.6.31 of 2See more

tinymediamanager media-servarr 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
acl@2.3.2-2+b1
no fix listed

Open the chart page →

8,098
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
acl@2.2.53-6
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
acl@2.2.53-6
no fix listed

Open the chart page →

18,713
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
acl@2.3.1-1
no fix listed

Open the chart page →

3,737
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
acl@2.3.2-1build1.1
no fix listed
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
acl@2.3.2-1build1.1
no fix listed
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
acl@2.3.2-1build1
no fix listed
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
acl@2.3.2-1build1
no fix listed
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
acl@2.3.2-1build1
no fix listed

Open the chart page →

11,651
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
acl@2.2.53-6
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
acl@2.2.53-6
no fix listed

Open the chart page →

18,713
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
acl@2.2.53-6
no fix listed
ciscolabs/rtsp-server:latestb59fc10bb821
acl@2.2.53-6
no fix listed

Open the chart page →

18,713
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
acl@2.3.1-3
no fix listed

Open the chart page →

5,955
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
acl@2.3.1-3
no fix listed

Open the chart page →

5,925
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
acl@2.3.2-2+b1
no fix listed

Open the chart page →

1,745
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
acl@2.3.1-3
no fix listed

Open the chart page →

5,484
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

2,607
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
acl@2.3.2-1build1.1
no fix listed

Open the chart page →

3,854
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
acl@2.2.53-6
no fix listed

Open the chart page →

12,076
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-54369.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
acl@2.3.1-3
no fix listed

Open the chart page →

7,518

Container images carrying it

2,512 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
acl@2.2.53-6
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
acl@2.3.1-3
no fix listed
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
acl@2.3.1-4.el9
0:2.4.0-0.el9_6.1
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
acl@2.3.1-3
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
acl@2.3.2-2+b1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
acl@2.3.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
acl@2.3.1-3
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
acl@2.3.1-3
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
acl@2.3.1-3
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.