Litmuschaos is a niche chaos-engineering and resilience-testing platform that enables operators to inject controlled failures into Kubernetes and other containerized environments; despite a narrow product footprint, its role in cluster management creates elevated privilege contexts where access control flaws carry outsized risk. The vendor's vulnerabilities skew toward serious outcomes and cluster across authorization and access-control weakness classes, including incorrect privilege assignment, improper authorization logic, and client-side enforcement of server-side controls, reflecting the sensitive nature of workload orchestration and cluster introspection. Defenders deploying this tool should treat access controls and role-based permission boundaries as critical security checkpoints and monitor upstream releases closely; live severity and exploitation figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Litmuschaos over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-8795CRITICAL A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /auth/login. The manipulation of the argum | Aug 10, 2025 | 9.9 | 30 | NO | NO |
CVE-2025-8797HIGH A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the component LocalStorage Handler. The manip | Aug 10, 2025 | 8.8 | 27 | NO | NO |
CVE-2025-8794HIGH A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unknown functionality of the component Local | Aug 10, 2025 | 7.8 | 23 | NO | NO |
CVE-2025-8791MEDIUM A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unknown processing of the file /auth/list_projects. The manipul | Aug 10, 2025 | 6.3 | 20 | NO | NO |
CVE-2025-8796MEDIUM A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affects unknown code of the file /auth/delete_project/ of the co | Aug 10, 2025 | 5.4 | 18 | NO | NO |
CVE-2025-8792MEDIUM A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulation leads to client-side enforcement of s | Aug 10, 2025 | 4.3 | 18 | NO | NO |
CVE-2025-8793MEDIUM A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument | Aug 10, 2025 | 4.3 | 16 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Litmuschaos.
Media articles that mention a CVE ID that affects a product developed by Litmuschaos — matched by CVE ID, not by vendor name.