CVE-2026-62246 | clastix kamaji 24.8.2 TenantControlPlane access control

A vulnerability described as very critical has been identified in clastix kamaji 24.8.2. Affected by this vulnerability is the function GetDefaultDatastoreSchema/GetDefaultDatastoreUsername of the component TenantControlPlane. Such manipulation leads to improper access controls.

This vulnerability is documented as CVE-2026-62246. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.