StackRadar

CVE-2026-89096

Unscored

Advisory

Published 17 Oct 2026In the index since 18 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
7
of 18,176 indexed, latest versions
Container images
5
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 18,176 indexed charts deploy, on 5 images.

Affected packageAffected versionsFixed inImages
nfs-utilsdeb1:2.6.2-4, 1:2.6.2-4+deb12u1, 1:2.8.3-1no fix listed5
OSV records
DEBIAN-CVE-2026-89096

Charts affected

7 by stars
ChartLatestAffected imagesRadar Score
csi-driver-nfscsi-driver-nfsVerified publisher4.13.51 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.5

1 of the 6 container images this version deploys carry CVE-2026-89096.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.13.519162ec4fb3f
nfs-utils@1:2.6.2-4+deb12u1
no fix listed

Open the chart page →

4,598
music-assistantbdclark-helm-chartsVerified publisher0.4.141 of 1See more

music-assistant bdclark-helm-charts 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-89096.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
nfs-utils@1:2.8.3-1
no fix listed

Open the chart page →

4,918
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-89096.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
nfs-utils@1:2.6.2-4
no fix listed

Open the chart page →

13,398
music-assistant-serverandibraeuVerified publisher2.1.51 of 1See more

music-assistant-server andibraeu 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-89096.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
nfs-utils@1:2.8.3-1
no fix listed

Open the chart page →

4,918
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-89096.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
nfs-utils@1:2.6.2-4+deb12u1
no fix listed

Open the chart page →

9,766
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-89096.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
nfs-utils@1:2.6.2-4+deb12u1
no fix listed

Open the chart page →

8,683
music-assistantnewbenji-chartsVerified publisher0.1.01 of 1See more

music-assistant newbenji-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-89096.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
nfs-utils@1:2.8.3-1
no fix listed

Open the chart page →

4,918

Container images carrying it

5 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/music-assistant/server:2.10.645fdb050e069
nfs-utils@1:2.8.3-1
no fix listed
3
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
nfs-utils@1:2.6.2-4
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
nfs-utils@1:2.6.2-4+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.519162ec4fb3f
nfs-utils@1:2.6.2-4+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
nfs-utils@1:2.6.2-4+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.