telepresenceio/telepresence Security Advisories | GitStock

high2026-11-09

CVE-2026-102340-Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets

GHSA-j8j4-rw65-56r6

high2026-11-09

CVE-2026-102339-Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable

GHSA-6j3h-rp73-6rvf