GO-2025-3985
NoneCVSS
—
EPSS
—
Published
Oct 23, 2025
CISA due date
—
The record
kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/kcp-dev/kcp | 0 | 0.28.3 |