CVE-2026-78424 — OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes

CVE-2026-78424

OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes PUBLISHED

Description (CNA)

Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the complete compromise of the worker node. This affects NeuVector 5.4 before 5.4.11, NeuVector 5.5 before 5.5.4, NeuVector 5.6 before 5.6.2 and potentially older versions.

Affected (CNA)

Vendor / product	Versions
SUSE / NeuVector	affected 0 before 5.4.11; affected 5.5.0 before 5.5.4; affected 5.6.0 before 5.6.2

CWE

CWE-78

References

https://github.com/neuvector/neuvector/security/advisories/GHSA-vr77-8vmq-qfmj

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.