Support Content Notification - Support Portal

Product Release Advisory - Platform Automation Toolkit 5.4.1

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

37045

Last Updated

24 February 2026

Initial Publication Date

24 February 2026

Status

CLOSED

Severity

HIGH

CVSS Base Score

8.6

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Platform Automation Toolkit 5.4.1

	Highest Score CVE from list below advisory details
Severity	High
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS V3.1 Score	8.6 (Sev: HIGH)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
platform-automation	CVE-2026-23949 - GHSA-58pv-8j8x-9vj2 (High) CVE-2025-68973 (High) CVE-2026-21226 - GHSA-jm66-cg57-jjv5 (High) CVE-2026-23490 - GHSA-63vm-454h-vhhq (High) CVE-2026-21441 - GHSA-38jv-5279-wg99 (High) CVE-2026-25210 (Medium) CVE-2026-24515 (Medium) CVE-2026-1489 (Medium) CVE-2026-1485 (Medium) CVE-2026-1484 (Medium) CVE-2026-0992 (Medium) CVE-2026-0990 (Medium) CVE-2026-0989 (Medium) CVE-2026-0988 (Medium) CVE-2026-0915 (Medium) CVE-2026-0861 (Medium) CVE-2025-15467 (Medium) CVE-2025-15281 (Medium) CVE-2025-14512 (Medium) CVE-2025-14087 (Medium) CVE-2025-13837 (Medium) CVE-2025-13601 (Medium) CVE-2025-13151 (Medium) CVE-2025-69277 - GHSA-mrfv-m5wm-5w6w (Medium) CVE-2026-22796 (Low) CVE-2026-22795 (Low) CVE-2025-8732 (Low) CVE-2025-7039 (Low) CVE-2025-69421 (Low) CVE-2025-69420 (Low) CVE-2025-69419 (Low) CVE-2025-69418 (Low) CVE-2025-68160 (Low) CVE-2025-3360 (Low) CVE-2021-46848 (Low)

Component

Vulnerabilities Resolved

platform-automation