Database/Container, Kubernetes & orchestration
Calico: DeleteCollection skips AuthorizeTierOperation, so a tenant can delete tiered NetworkPolicies they
CVE-2026-41187Container, Kubernetes & orchestrationcurated
Impact
DeleteCollection skips AuthorizeTierOperation, so a tenant can delete tiered NetworkPolicies they cannot delete individually
Who can reach it
Cluster user with namespace access
What to do
Rolling Calico apiserver upgrade
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.