> ZDI-25-855: Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability
[DATE: 27/08/2025 05:00]
[LANGUAGE: EN]
This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-9276.