telepresenceio

Products

ProductCVEsExploitedLatest
telepresence2–Nov 4, 2026

Exploited and recent CVEs

  • CVE-2026-102340 High 8.5 Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets 0.3%
  • CVE-2026-102339 High 8.2 Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable 0.3%