CLEANSTART-2026-SL63030: gRPC-Go is the Go language implementation of gRPC

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates network-based exploitation with low attack complexity. It does not require attacker privileges or user interaction.

Q: What security impact is indicated?

The vulnerability is rated critical with a 9.1 score. It has high potential impact on confidentiality and integrity, while no availability impact is indicated.

Q: Which deployments should be prioritized for triage?

Prioritize deployments that use the cleanstart/yunikorn-k8shim package, particularly where the affected functionality is reachable over the network. The provided data does not identify affected versions or a fixed release.

Published Nov 14, 2026

Updated

Security vulnerability affects the yunikorn-k8shim package. gRPC-Go is the Go language implementation of gRPC.

Affected Software

1 affected componentFixes available

cleanstart/yunikorn-k8shim<1.8.0-r4

1.8.0-r4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/yunikorn-k8shim to a version that resolves this vulnerability.
Fixed in 1.8.0-r4

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-33186

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates network-based exploitation with low attack complexity. It does not require attacker privileges or user interaction.

What security impact is indicated?

The vulnerability is rated critical with a 9.1 score. It has high potential impact on confidentiality and integrity, while no availability impact is indicated.

Which deployments should be prioritized for triage?

Prioritize deployments that use the cleanstart/yunikorn-k8shim package, particularly where the affected functionality is reachable over the network. The provided data does not identify affected versions or a fixed release.

CLEANSTART-2026-SL63030: gRPC-Go is the Go language implementation of gRPC

Affected Software

Remediation

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What security impact is indicated?

Which deployments should be prioritized for triage?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What security impact is indicated?

Which deployments should be prioritized for triage?