Eclipse Ankaios (Eclipse Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-17. Vendor: Eclipse Foundation.

CVEs of Eclipse Ankaios

• CVE-2026-92611 - CVSS 4.8 (medium), 2026-09-17: In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard pattern in a…
• CVE-2026-86836 - CVSS 8.4 (high), 2026-09-14: In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived…
• CVE-2026-85201 - CVSS 6.8 (medium), 2026-09-07: In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received…
• CVE-2026-84173 - CVSS 8.3 (high), 2026-09-07: In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rules whose first…