CVE-2026-44514: Kubetail-Org Github.com/kubetail-Org/kubetail/modules/cli

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A malicious web page visited by a user with an active Kubetail session could open a WebSocket to the user's dashboard and read their Kubernetes logs in real time. This is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability and affects both the desktop deployment (default http://localhost:7500) and cluster deployments (typically behind an Ingress with HTTP basic auth). This vulnerability is fixed in 0.14.0.

Affected products

• Kubetail-Org Github.com/kubetail-Org/kubetail/modules/cli: before 0.16.0 (fixed in 0.16.0)
• Kubetail-Org Github.com/kubetail-Org/kubetail/modules/dashboard: before 0.14.0 (fixed in 0.14.0)
• Kubetail-Org Kubetail: before 0.14.0 (fixed in 0.14.0)

Published 2026-05-14. Last modified 2026-06-17.