Loft-sh Loft vulnerabilities

• loft-sh loft vCluster Platform: Stored XSS can lead to privilege escalation CVE-2026-42457 9.0 CriticalMay 14, 2026
• loft-sh loft vCluster Platform's Access Keys Allows Access Beyond Scope CVE-2026-22806 9.1 CriticalJanuary 29, 2026