CVE-2022-26311: Couchbase Cloud Native Operator

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.

Affected products

• Couchbase Cloud Native Operator: from 2.2.0, before 2.2.3 (fixed in 2.2.3)

Published 2022-03-10. Last modified 2026-06-17.