SCA: security update for github.com/cert-manager/cert-manager (GHSA-8rvj-mm4h-c258)

high Tenable Cloud Security Plugin ID 477910

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and
simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and
1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace users without
admission validation tying the Challenge to an Order, owner reference, or Issuer-selected solver, allowing
attacker-controlled Challenge.spec.solver values referencing a ClusterIssuer to bypass DNS01 solver
selectors such as dnsZones, dnsNames, and matchLabels and cause cert-manager to use ClusterIssuer DNS
credentials for attacker-selected provider settings and DNS names, including disclosure of X-Api-User and
X-Api-Key headers for acme-dns. This issue is fixed in versions 1.19.6 and 1.20.3. (CVE-2026-62290)

Solution

Update the github.com/cert-manager/cert-manager library and its related packages to version 1.19.6 or later.

Plugin Details

Severity: High

ID: 477910

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/29/2026

Updated: 10/29/2026

Risk Information

VPR

Risk Factor: Low

Score: 3.9

Percentile: 52.71

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 5.2

Temporal Score: 4.1

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:P/A:N

CVSS Score Source: CVE-2026-62290

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.6

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/29/2026

Vulnerability Publication Date: 7/16/2026

Reference Information

CVE: CVE-2026-62290

cwe: CWE-863

Detections

Analytics