CVE-2026-54370
HighAdvisory
Published 29 Jun 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.2
- base score, highest
- EPSS
- 0.001
- 0th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,459
- of 17,790 indexed, latest versions
- Container images
- 2,440
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
CVE-2026-54370 affecting package acl for versions less than 2.4.0-1
Carried by container images the latest versions of 2,459 of 17,790 indexed charts deploy, on 2,440 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| acldeb | 2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more | 2.4.0-1 | 2,437 |
| aclrpm | 2.3.1-2.azl3 | 2.4.0-1 | 3 |
Charts affected
2,459 by stars
Container images carrying it
2,440 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apachepulsar/ | d538416d5afe | acl | no fix listed | 1 |
| apache/ | 76c176e8a0e4 | acl | no fix listed | 1 |
| apache/ | 434d8398f996 | acl | no fix listed | 1 |
| apache/ | c8fb51195444 | acl | no fix listed | 1 |
| apache/ | 133d35d2c263 | acl | no fix listed | 1 |
| apache/ | b4ec8c18d079 | acl | no fix listed | 1 |
| apache/ | 295f1dc87d98 | acl | no fix listed | 1 |
| apache/ | 80530f0308a5 | acl | no fix listed | 1 |
| apache/ | ab9467fd712c | acl | no fix listed | 1 |
| apache/ | 80072bb73dd3 | acl | no fix listed | 1 |
| apache/ | 90b7fa1dc018 | acl | no fix listed | 1 |
| apache/ | 92d055a84e9e | acl | no fix listed | 1 |
| apecloud/ | 8ac9947a2c84 | acl | no fix listed | 1 |
| appwrite/ | af65a77db50e | acl | no fix listed | 1 |
| archivebox/ | 1a5a37331091 | acl | no fix listed | 1 |
| arilot/ | 27a4f7e0f9f1 | acl | no fix listed | 1 |
| aristidetm/ | 469dbc951224 | acl | no fix listed | 1 |
| arthurjguerra18/ | f540af20b307 | acl | no fix listed | 1 |
| artifacthub/ | 5368d21a6e5c | acl | no fix listed | 1 |
| artur9010/ | 6b4de3ce8b0e | acl | no fix listed | 1 |
| arunvelsriram/ | 655ad18fd8d6 | acl | no fix listed | 1 |
| assistiot/ | 6a107f224c34 | acl | no fix listed | 1 |
| assistiot/ | d157fbe150e3 | acl | no fix listed | 1 |
| assistiot/ | 0d3e6d35f168 | acl | no fix listed | 1 |
| assistiot/ | e9bae124095f | acl | no fix listed | 1 |
| assistiot/ | 30812ba93555 | acl | no fix listed | 1 |
| assistiot/ | ea254b6d8a31 | acl | no fix listed | 1 |
| assistiot/ | 7d6a0d534c7f | acl | no fix listed | 1 |
| assistiot/ | 38b003e55ff3 | acl | no fix listed | 1 |
| assistiot/ | b1dbe4d62a03 | acl | no fix listed | 1 |
| assistiot/ | e5ae539ce2cb | acl | no fix listed | 1 |
| athou/ | 5e388351df1a | acl | no fix listed | 1 |
| atlassian/ | 4af4bb6c8d46 | acl | no fix listed | 1 |
| atlassian/ | 51c2d7274eef | acl | no fix listed | 1 |
| atlassian/ | 05933f2b1cfd | acl | no fix listed | 1 |
| atlassian/ | 3b9222ab32ef | acl | no fix listed | 1 |
| atlassian/ | c81cc7d6bc9e | acl | no fix listed | 1 |
| atlassian/ | ebf761c7d437 | acl | no fix listed | 1 |
| atlassian/ | 37bc46cbec1a | acl | no fix listed | 1 |
| atlassian/ | 64a75aa4ec4e | acl | no fix listed | 1 |
| atlassian/ | e5548cd4eea8 | acl | no fix listed | 1 |
| avaprotocol/ | c430ea5c37d6 | acl | no fix listed | 1 |
| avinash263/ | aa2b8727f1a6 | acl | no fix listed | 1 |
| avzini/ | f40b30210ed0 | acl | no fix listed | 1 |
| baserow/ | 7c00549b3a6f | acl | no fix listed | 1 |
| baserow/ | e0b3c8130b91 | acl | no fix listed | 1 |
| baserow/ | df0c42eb67e8 | acl | no fix listed | 1 |
| baserow/ | 566d24c7d9f5 | acl | no fix listed | 1 |
| bbernhard/ | 549ad08d7e14 | acl | no fix listed | 1 |
| beanbag/ | 6b840f546e1c | acl | no fix listed | 1 |