Post

CVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation -

github.comCVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation · Issue #142097 · kubernetes/kubernetesCVSS Rating: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Medium (5.9) A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on ...

25/9/26, 3:06 pm2 reposts2 likes

No replies yet.