CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
AWS Private Certificate Authority ยท 2026-10-29
Actions
Technical Details
| Affected Versions | before v1.10.1, before v1.10.1-eksbuild.1 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-119115 |
| Breaking Change | Yes |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update your aws-privateca-issuer to version v1.10.1 and audit your CertificateRequest, Certificate, and Ingress resources to explicitly set issuerRef.kind to match the referenced issuer before upgrading to avoid service disruptions.
For Platform Teams
Adopt the latest version of aws-privateca-issuer to enforce stricter issuer resolution logic, enhancing the security posture of your Kubernetes-based certificate management.
For Executives
Implement the upgrade to aws-privateca-issuer v1.10.1 to mitigate the security risk posed by CVE-2026-119115, ensuring compliance and maintaining the integrity of certificate issuance within your Kubernetes environment.