CVE-2026-54370
HighAdvisory
Published 29 Jun 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.2
- base score, highest
- EPSS
- 0.001
- 0th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,524
- of 17,837 indexed, latest versions
- Container images
- 2,490
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
CVE-2026-54370 affecting package acl for versions less than 2.4.0-1
Carried by container images the latest versions of 2,524 of 17,837 indexed charts deploy, on 2,490 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| acldeb | 2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more | 2.4.0-1 | 2,487 |
| aclrpm | 2.3.1-2.azl3 | 2.4.0-1 | 3 |
Charts affected
2,524 by stars
| Chart | Latest | Affected images | Radar Score |
|---|
Container images carrying it
2,490 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 83edc2b8e9ff | acl | no fix listed | 1 |
| library/ | a17e6c4fec82 | acl | no fix listed | 1 |
| library/ | b43d2dcbbdb1 | acl | no fix listed | 1 |
| library/ | bb142a9c18ac | acl | no fix listed | 1 |
| library/ | be0a135f1955 | acl | no fix listed | 1 |
| library/ | d2ad7b21cafa | acl | no fix listed | 1 |
| library/ | d31852005202 | acl | no fix listed | 1 |
| library/ | 04ac44a2595b | acl | no fix listed | 1 |
| library/ | 0842dcd4c8f8 | acl | no fix listed | 1 |
| library/ | ef9723cf4fe4 | acl | no fix listed | 1 |
| library/ | 507a3eecf809 | acl | no fix listed | 1 |
| library/ | dbde329dcbfa | acl | no fix listed | 1 |
| library/ | 152dc042452c | acl | no fix listed | 1 |
| library/ | b8b6ee6aa931 | acl | no fix listed | 1 |
| library/ | 4d0bb287d87b | acl | no fix listed | 1 |
| library/ | 51464c8fdb10 | acl | no fix listed | 1 |
| library/ | 8ae66efb09a2 | acl | no fix listed | 1 |
| library/ | ad4a8bae2eb4 | acl | no fix listed | 1 |
| library/ | edeeae67330a | acl | no fix listed | 1 |
| library/ | f73396626d2f | acl | no fix listed | 1 |
| library/ | 9b8142bce157 | acl | no fix listed | 1 |
| library/ | 55d1e5b2e601 | acl | no fix listed | 1 |
| library/ | dfa9ba46d14b | acl | no fix listed | 1 |
| libretranslate/ | 1de2d7056bb8 | acl | no fix listed | 1 |
| lightbend/ | b0c9894ac8dd | acl | no fix listed | 1 |
| linuxchina/ | f758e2e567ee | acl | no fix listed | 1 |
| linuxserver/ | a847b5b2d860 | acl | no fix listed | 1 |
| linuxserver/ | 241009026e6f | acl | no fix listed | 1 |
| linuxserver/ | 938810eca3d3 | acl | no fix listed | 1 |
| linuxserver/ | a5e43a05ae79 | acl | no fix listed | 1 |
| linuxserver/ | b801bbcf6386 | acl | no fix listed | 1 |
| linuxserver/ | 0ac871624394 | acl | no fix listed | 1 |
| linuxserver/ | 2ce561a95e7b | acl | no fix listed | 1 |
| linuxserver/ | 9a997426d71e | acl | no fix listed | 1 |
| linuxserver/ | ebb32940e4bb | acl | no fix listed | 1 |
| linuxserver/ | 2427dde159a2 | acl | no fix listed | 1 |
| linuxserver/ | f93d2560e233 | acl | no fix listed | 1 |
| linuxserver/ | 2fbb21fb4903 | acl | no fix listed | 1 |
| linuxserver/ | 2785a6ad64d3 | acl | no fix listed | 1 |
| linuxserver/ | 4a13ced2326c | acl | no fix listed | 1 |
| linuxserver/ | 0ae315a3a456 | acl | no fix listed | 1 |
| linuxserver/ | ab105cc50322 | acl | no fix listed | 1 |
| linuxserver/ | 7f15f34937ce | acl | no fix listed | 1 |
| lis314/ | aa2089c37920 | acl | no fix listed | 1 |
| litmuschaos/ | 99961210d467 | acl | no fix listed | 1 |
| livekit/ | 1ab01641b366 | acl | no fix listed | 1 |
| lmacka/ | 93f5c048b7d4 | acl | no fix listed | 1 |
| localstack/ | 9d278167f2b7 | acl | no fix listed | 1 |
| locustio/ | 51d866285170 | acl | no fix listed | 1 |
| logiqai/ | 65b996bc7bdc | acl | no fix listed | 1 |