漏洞描述
NeuVector through 5.4.9 contains an information disclosure vulnerability caused by missing authentication and cached sensitive data in the manager /network/graph API, letting remote attackers access sensitive information, exploit requires no special privileges.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-25703↗github.comhttps://github.com/neuvector/manager/security/advisories/GHSA-hx45-873x-74qv↗github.comhttps://github.com/neuvector/manager/commit/949cc1184fdf671416f788d9d2a039f8558a717d↗github.comhttps://github.com/neuvector/manager/releases/tag/v5.5.0↗