Network Policy Misconfiguration in CTFer.io Monitoring Component
CVE-2026-32720

7.1HIGH

Key Information:

Vendor

Ctfer-io

Status
Monitoring
Vendor
CVE Published:
13 March 2026

What is CVE-2026-32720?

The CTFer.io Monitoring component is responsible for managing the collection, processing, and storage of diverse signals such as logs, metrics, and distributed traces. Before version 0.2.1, a flaw in the NetworkPolicy configuration permitted a malicious actor to pivot access from one component to another across namespaces. This breach undermines the integral security principles expected during deployment, creating opportunities for unauthorized lateral movement within the system. The issue has been addressed in version 0.2.1.

Affected Version(s)

monitoring < 0.2.1

References

https://github.com/ctfer-io/monitoring/security/advisorie...
x_refsource_CONFIRM

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.