VendorsChaos-meshchaos_meshall versions
Vulnerabilities

Chaos-mesh Chaos Mesh

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2025-59361
OS command injection in Chaos Mesh via the cleanIptables mutation
Published 2025-09-15 · Analyzed
9.8EPSS 0.033
CVE-2025-59359
OS command injection in Chaos Mesh via the cleanTcs mutation
Published 2025-09-15 · Analyzed
9.8EPSS 0.029
CVE-2025-59360
OS command injection in Chaos Mesh via the killProcesses mutation
Published 2025-09-15 · Analyzed
9.8EPSS 0.028
CVE-2024-36538
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Published 2024-07-24 · Analyzed
8.8EPSS 0.006
CVE-2025-59358
Denial of Service via Unauthorized Access to Chaos Mesh debugging server
Published 2025-09-15 · Analyzed
7.5EPSS 0.008