CVE-2026-54370
HighAdvisory
Published 29 Jun 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.2
- base score, highest
- EPSS
- 0.001
- 0th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,459
- of 17,792 indexed, latest versions
- Container images
- 2,436
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
CVE-2026-54370 affecting package acl for versions less than 2.4.0-1
Carried by container images the latest versions of 2,459 of 17,792 indexed charts deploy, on 2,436 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| acldeb | 2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more | 2.4.0-1 | 2,433 |
| aclrpm | 2.3.1-2.azl3 | 2.4.0-1 | 3 |
Charts affected
2,459 by stars
Container images carrying it
2,436 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | f87fa67a561f | acl | no fix listed | 1 |
| grafana/ | 65bfae480b57 | acl | no fix listed | 1 |
| grafana/ | 8dcfdf466da0 | acl | no fix listed | 1 |
| graphprotocol/ | b0436347fb24 | acl | no fix listed | 1 |
| graphprotocol/ | f4452cdedd68 | acl | no fix listed | 1 |
| graylog/ | 19de1aff48c2 | acl | no fix listed | 1 |
| graylog/ | 598bd41fefd5 | acl | no fix listed | 1 |
| graylog/ | bf3e1e7b7352 | acl | no fix listed | 1 |
| graylog/ | 8a1f641cd7aa | acl | no fix listed | 1 |
| greenkube/ | 0c01932282a4 | acl | no fix listed | 1 |
| grpl/ | c00aafee6629 | acl | no fix listed | 1 |
| guacamole/ | 0f62f6d17ab3 | acl | no fix listed | 1 |
| guillh/ | 4fb99dbc32b2 | acl | no fix listed | 1 |
| gulacedia/ | 67b467d961ca | acl | no fix listed | 1 |
| hamidyousefi93/ | c34f071f6ed0 | acl | no fix listed | 1 |
| hamzaarshad10/ | 2c1c3b86a8e7 | acl | no fix listed | 1 |
| hamzaarshad10/ | 154f38e8668e | acl | no fix listed | 1 |
| hansehe/ | bc8e45262bc4 | acl | no fix listed | 1 |
| haohanyang/ | 54f2112602ee | acl | no fix listed | 1 |
| haohanyang/ | f4f8fe4e21f1 | acl | no fix listed | 1 |
| hassroutyyoussef/ | 1f01edf1ee0c | acl | no fix listed | 1 |
| hassroutyyoussef/ | 2fc3d1617928 | acl | no fix listed | 1 |
| hassroutyyoussef/ | e0392e2b4a90 | acl | no fix listed | 1 |
| hasura/ | 0111b0204136 | acl | no fix listed | 1 |
| hasura/ | f6c1c4b957d2 | acl | no fix listed | 1 |
| haugene/ | 059216cfae4b | acl | no fix listed | 1 |
| haveagitgat/ | 1256348872ce | acl | no fix listed | 1 |
| haveagitgat/ | 1e3f9328327d | acl | no fix listed | 1 |
| haveagitgat/ | 3ff0913202dd | acl | no fix listed | 1 |
| hazegoodlife/ | 50f02d2d5d4d | acl | no fix listed | 1 |
| hazegoodlife/ | 8d4c63169e14 | acl | no fix listed | 1 |
| headwindmdm/ | 3550b4840840 | acl | no fix listed | 1 |
| healthchecks/ | aa08a61b0dcf | acl | no fix listed | 1 |
| hecrom/ | bb0372939c19 | acl | no fix listed | 1 |
| helicone/ | 4c69b971a7e4 | acl | no fix listed | 1 |
| helicone/ | 4a913936c97b | acl | no fix listed | 1 |
| helmforge/ | 61f759a1421f | acl | no fix listed | 1 |
| helmforge/ | fcb7017327d6 | acl | no fix listed | 1 |
| hiboxsystems/ | b59f01bc0418 | acl | no fix listed | 1 |
| hiboxsystems/ | dcffb926e563 | acl | no fix listed | 1 |
| hirosystems/ | 9c98b23c1515 | acl | no fix listed | 1 |
| hivemq/ | d8250a233cea | acl | no fix listed | 1 |
| hivemq/ | 241d6a8e1963 | acl | no fix listed | 1 |
| hivemq/ | a919f990141b | acl | no fix listed | 1 |
| hivemq/ | f9746d5d70fa | acl | no fix listed | 1 |
| hiversh/ | 0e36d98402bc | acl | no fix listed | 1 |
| hiversh/ | b5048c6342ce | acl | no fix listed | 1 |
| hiversh/ | 2fbf9f264498 | acl | no fix listed | 1 |
| hiversh/ | 4f43130f51e5 | acl | no fix listed | 1 |
| hiversh/ | b0b85f8942c7 | acl | no fix listed | 1 |