alertmanager :: RBAC ATLAS

Image CVEs: Trivy 0.76.1 + cve.now enrichment, as of 2026-11-06. Default chart images only; a CVE in an image is not proof it is exploitable in this workload. Methodology

Description

The Alertmanager handles alerts sent by client applications such as the Prometheus server.

https://github.com/prometheus/alertmanager

Overview

Identity	Namespace	Automount	Secrets	Permissions	Workloads	Risk
`alertmanager`	default		—	0	2	—

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

`alertmanager`

Namespace: default | Automount:

Permissions (0)

No explicit RBAC bindings.

Workloads (2)

Kind	Name	Container	Image
StatefulSet	alertmanager	alertmanager	quay.io/prometheus/alertmanager:v0.34.2 Low 0 critical · 0 high Top 3 of 3 CVEs CVE-2026-78661 Unknown CVSS 7.5 golang.org/x/net fixed in 0.62.0 CVE-2026-97045 Unknown CVSS 6.1 golang.org/x/net fixed in 0.62.0 GO-2026-5932 Unknown golang.org/x/crypto fixed in 0.58.1-0.20261009181718-2f1f834330b2 fixable: 0 critical, 0 high · scanned 2026-11-06 as `quay.io/prometheus/alertmanager:v0.34.2`
StatefulSet	alertmanager	alertmanager-configmap-reload	quay.io/prometheus-operator/prometheus-config-reloader:v0.95.1 Low 0 critical · 0 high Top 1 of 1 CVEs GO-2026-5932 Unknown golang.org/x/crypto fixed in 0.58.1-0.20261009181718-2f1f834330b2 fixable: 0 critical, 0 high · scanned 2026-11-06 as `quay.io/prometheus-operator/prometheus-config-reloader:v0.95.1`