VULNERABILITY INTELLIGENCE

CVE-2024-36538

CVSS score8.8 HIGH

EPSS probability0.57%

CISA KEVNot currently listed

Published2024-07-24

Last modified2026-06-17

Description

Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.