CLEANSTART-2026-YW36992 Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers

🗓️ 31 Oct 2026 14:00:30Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 8 Views

Users may launch containers bypassing mountable secrets policy in ephemeral containers.

Reporter	Title	Published	Views	Family All 114
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.	30 Jan 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2023-2728)	13 Jul 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	12 Nov 202519:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	7 Nov 202516:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable due to k8s.io/kubernetes ( CVE-2023-2728, CVE-2023-2727, CVE-2023-5408, CVE-2023-3955, CVE-2023-3676 )	8 Aug 202415:28	–	ibm
AlpineLinux	CVE-2023-2728	3 Jul 202320:06	–	alpinelinux
Chainguard	CVE-2023-2728 vulnerabilities	3 Jul 202321:15	–	cgr
Circl	CVE-2023-2728	4 Jul 202300:23	–	circl
CNNVD	Kubernetes security vulnerabilities	15 Jun 202300:00	–	cnnvd

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YW36992.json
osv	www.osv.dev/vulnerability/CVE-2023-2728
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-2728

31 Oct 2026 16:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.02157

library ephemeral containers mountable secrets policy ServiceAccount admission plugin bypass