Uber Kraken
3 CVEs affecting Uber Kraken. Latest disclosed: 2026-09-16. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-75625 | Critical | 9.0 | 2026-08-18 | Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying o… |
CVE-2026-92791 | High | 7.5 | 2026-09-16 | Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/{tag} endpoint, allowing unauthenticated attackers to traverse outside the configur… |
CVE-2022-47747 | High | 7.5 | 2023-01-20 | kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs. |