CVE-2026-18544

HighCVSS 8.1

Published: 19/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

IBM Portieris versions 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references.

Risk Assessment

An attacker could deploy unauthorized container images, potentially leading to execution of malicious code in the cluster.

Recommendation

Update IBM Portieris to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references.