CVE-2026-54450 | Stacklok ToolHive up to 0.29.0 IP Classification utilities.go networking.IsPrivateIP access control

September 15, 2026 Yanac

A vulnerability was found in Stacklok ToolHive up to 0.29.0. It has been declared as critical. Impacted is the function networking.IsPrivateIP of the file pkg/networking/utilities.go of the component IP Classification. Such manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-54450. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More