kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

CVE-Requests-1896609

CVE Requests 1896609 - feiskyer/mcp-kubernetes-server Executive Summary This report details two critical security vulnerabilities discovered in the feiskyer/mcp-kubernetes-server package. When deployed, the server exposes an MCP tool named kubectl which is intended to provide limited, safe access...

CVE-2019-1002101-Helpers

kubectlcpCVE-2019-1002101 PoC helper scripts and Dockerfile for CVE-2019-1002101 For detailed info, goto https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/ and...

trivy-plugin-kubectl

trivy-plugin-kubectl A Trivy plugin that scans the images of a kubernetes resource Install $ trivy plugin install github.com/aquasecurity/trivy-plugin-kubectl $ trivy kubectl -h Usage: trivy kubectl -h,--help TYPE NAME TRIVY OPTION A Trivy plugin that scans the images of a kubernetes resource...

CLEANSTART-2025-IZ48257 kubectl cp command allows copying files between containers and the user machine

Security vulnerability affects the k3s package. The kubectl cp command allows copying files between containers and the user machine...

CLEANSTART-2026-LR68789 kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal

Security vulnerability affects the nodetaint package. kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal...

OPENSUSE-SU-2026:12297-1 kubectl-retina-1.3.1-1.1 on GA media

These are all security issues fixed in the kubectl-retina-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

OESA-2026-4463 kubernetes security update

Container cluster management. Security Fixes: A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpac...

OESA-2026-4462 kubernetes security update

Container cluster management. Security Fixes: A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpac...

OESA-2026-4460 kubernetes security update

Container cluster management. Security Fixes: A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpac...

OESA-2026-4461 kubernetes security update

Container cluster management. Security Fixes: A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpac...

OneUptime Authorization Issue Vulnerability

Versions of OneUptime from 14.0.2 until 14.0.69 had an authorization issue. This vulnerability stemmed from improper authorization checks. Certified project members could use project-level permissions to perform operations on clusters outside their permission scope. This could lead to issues such...

red-kube

Emulación de adversario K8S para Red Team basada en kubectl Red Kube es una colección de comandos de kubectl diseñados para evaluar la postura de seguridad de los clústeres de Kubernetes desde la perspectiva del atacante. Los comandos son pasivos para recopilación de datos y divulgación de...

rakkess

rakkess Revisar Acceso - plugin de kubectl para mostrar una matriz de acceso para recursos del servidor Introducción ¿Alguna vez te has preguntado qué derechos de acceso tienes en un clúster de Kubernetes proporcionado? Para recursos individuales puedes usar kubectl auth can-i list deployments,...

kubectl cp Arbitrary File Write

The vulnerability of the kubectl cp command in the Kubernetes command line tool relates to an incorrect path name limitation. Exploiting this vulnerability could allow a remote attacker to write arbitrary files...

kubectl-cnpg-1.30.1-1.1 on GA media (moderate)

kubectl-cnpg-1.30.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11881-1 Rating: moderate Cross-References: CVE-2026-84304 CVSS scores: CVE-2026-84304 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-84304 SUSE : 8.7...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the staging/src/k8s.io/kubectl/pkg/cmd/cp/filespec.go path handling logic. An attacker who controls the tar output from a container can write files to arbitrary locations on a Windows user’s local machine by causi...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the staging/src/k8s.io/kubectl/pkg/cmd/cp/filespec.go path handling logic. An attacker who controls the tar output from a container can write files to arbitrary locations on a Windows user’s local machine by causi...

CVE-2026-19444

A flaw was found in Kubernetes kubectl. An attacker controlling a container can write arbitrary files to the host system when a user copies files from the container. Because the tool does not properly validate file paths when extracting archives on Windows, a malicious container can traverse...