CVE-2021-23154: Mirantis Lens

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed in the user's shell. Arguments can be provided which cause arbitrary shell commands to run on the system.

Affected products

• Mirantis Lens: up to and including 5.3.3

Published 2022-01-10. Last modified 2026-06-17.