---
id: CVE-2026-92720
title: >-
  Kubero through 3.1.1 fails to apply authentication guards to the notifications
  API endpoints, allowing unauthenticated attackers to read webhook secrets and
  service URLs
summary: >-
  Kubero through 3.1.1 fails to apply authentication guards to the notifications
  API endpoints, allowing unauthenticated attackers to read webhook secrets and
  service URLs. Attackers can retrieve stored credentials and register malicious
  w…
severity: critical
cvss: 9.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-306
vendor: kubero-dev
product: kubero
affected:
  - kubero <= 3.1.1
published: '2026-09-16'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T21:08:55.030'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92720'
references:
  - url: 'https://github.com/kubero-dev/kubero'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/kubero-dev/kubero/blob/v3.1.1/server/src/main.ts'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/kubero-dev/kubero/blob/v3.1.1/server/src/notifications/notifications.controller.ts#L23-L33
    label: disclosure@vulncheck.com
  - url: 'https://github.com/kubero-dev/kubero/issues/753'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/kubero-through-3.1.1-unauthenticated-notifications-api-access
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
epss: 0.00632
epssPercentile: 0.48112
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-17T19:15:37.495888Z'
ingestedAt: '2026-09-16T18:01:17.459Z'
---

## Overview

Kubero through 3.1.1 fails to apply authentication guards to the notifications API endpoints, allowing unauthenticated attackers to read webhook secrets and service URLs. Attackers can retrieve stored credentials and register malicious webhooks to intercept pipeline events or suppress alerting by deleting existing configurations.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.