CVE-2026-62147 – Tempo-operator: tempo operator: query rbac bypass

CVE ID :CVE-2026-62147

Published : July 13, 2026, 12:16 p.m. | 1 hour, 13 minutes ago

Description :The Tempo Operator’s gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing an authenticated user to read span attributes belonging to other tenants’ namespaces.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…