Submariner Vulnerability CVE-2026-66785: Critical Risk Alert
- Severity
- CRITICAL
- CVSS
- 9.9
- Affected component
- submariner (npm)
- Patched version
- Not yet available
A critical vulnerability, CVE-2026-66785, has been identified in the Submariner package. This flaw could allow a malicious cluster to redirect network traffic from other connected clusters by publishing a specially crafted network endpoint.
What happened
The vulnerability in Submariner allows a malicious cluster to declare arbitrary network ranges by failing to validate the network subnets provided. This could result in all network traffic intended for these ranges being rerouted through the attacker's tunnel, leading to potential unauthorized information disclosure or network disruption.
This issue was first flagged on August 20, 2026. The vulnerability has a CVSS score of 9.9, indicating a critical severity level. However, there is no indication that this vulnerability has been exploited in the wild as of the latest reports.
What to do about it
- Monitor for updates on the Submariner package for any patches or fixes.
- Apply patches as soon as they are available to mitigate the risk.
- No official fix has been published yet. Monitor the sources below for updates on the Submariner package.
- Review your network configurations and validate the network subnets to ensure they are secure.
- Consider implementing additional security measures to protect against potential network traffic redirection.
How 0Day would have caught this
submariner is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
If you are using the Submariner package, you may be affected. However, no authoritative version range has been published yet. Consult the primary sources for the most current information.
What should I do right now?
Monitor for updates on the Submariner package and apply patches as soon as they are available. In the absence of a patch, review your network configurations and consider additional security measures.
Is this vulnerability being exploited in the wild?
There is no indication that this vulnerability has been exploited in the wild as of the latest reports.