Critical Flaw in kube-compare Allows Arbitrary Code Execution

• •CVE-2026-87114 allows arbitrary code execution via kube-compare.
• •Risk is high for teams using untrusted container references.
• •Mitigation includes using only trusted images and reviewing Docker permissions.

A significant vulnerability (CVE-2026-87114) has been identified in kube-compare, where processing a 'container://' reference path leads to the execution of an untrusted container image's entrypoint. This flaw enables remote attackers to execute arbitrary code on the operator's workstation. If the Docker daemon requires elevated privileges, the untrusted code may run with root privileges, posing a serious security risk. Teams that process untrusted container references are particularly at risk, as successful exploitation can compromise local credentials and sensitive data. The attack requires user interaction but can lead to host-level control. Users are advised to only use trusted container images and to review Docker access permissions. The vulnerability was disclosed on 2026-09-28, and mitigation strategies are recommended until a patch is available.