Pinniped (Vmware) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 27 known versions, newest CVE from 2026-07-09. Vendor: Vmware.

CVEs of Pinniped

• CVE-2026-59269 - CVSS 3.8 (low), 2026-07-09: A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially gain elevated permissions in the clusters, only if all the…
• CVE-2022-31677 - CVSS 5.4 (medium), 2022-08-29: An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the…
• CVE-2022-22975 - CVSS 6.6 (medium), 2022-05-11: An issue was discovered in the Pinniped Supervisor with either LADPIdentityProvider or ActiveDirectoryIdentityProvider resources. An attack would involve the…