Policy-Based Framework for Kubernetes Affected by Hostname Validation Issue

CVE-2026-61795

What is CVE-2026-61795?

The Capsule framework for Kubernetes has a vulnerability in its hostname validation process. When updating tenant configurations, the system incorrectly processes the old and new allowed hostname regex patterns. As a result, an administrator could inadvertently store an invalid regex due to the stale validation. This flaw causes subsequent Ingress operations to fail, as the system overlooks the regex error and blocks all hostnames from matching until the tenant configuration is fixed by an administrator. The issue has been addressed in version 0.13.7, underscoring the importance of maintaining up-to-date software.

References