PatchTheCVEflink kubernetes operator vulnerabilities and fixes
Recent CVEs affecting flink kubernetes operator, with upgrade or downgrade steps. 1 tracked.
Also searched as: flinkkubernetesoperator.
flink kubernetes operator has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-05-26. Highest priority: CVE-2026-40564 (score 41/100).
- CVE-2026-40564 MEDIUM 6.5 UPGRADE Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apach
FAQ
How do I fix flink kubernetes operator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flink kubernetes operator being exploited right now?
None of the tracked flink kubernetes operator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flink kubernetes operator CVE should I patch first?
CVE-2026-40564 currently ranks highest (41/100): Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apach.