Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-33396 1 Karmada-io 1 Karmada 2026-11-09 8.4 High
An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component. NOTE: The maintainer states that the behavior is intended design and notes that the researcher advisory does not provide evidence of arbitrary code execution.