mks-copy-fail-mitigation

Copy Fail 缓解 DaemonSet 用于在 MKS 集群的所有 worker 节点上修复 Copy Fail 系列漏洞的 DaemonSet。 目录 CVE-2026-31431 Copy Fail CVE-2026-43284、CVE-2026-43500、CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail 漏洞描述 CVE ID： CVE-2026-31431 CVE 链接： https://nvd.nist.gov/vuln/detail/CVE-2026-31431 攻击向量及 CVSS v.3.1 危险等级： 得分：7.8 HI...

GHSA-VWM4-62GF-X745 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset...

CVE-2026-54899 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset...

CVE-2026-54896 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset...

CVE-2026-33210 vulnerabilities

Vulnerabilities for packages: ruby, gitlab-cng, logstash, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.3-rails, cinc-auditor, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails...

CVE-2024-49761 vulnerabilities

Vulnerabilities for packages: ruby, logstash, kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, jruby, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2024-43403 Kanister has a potential risk which can be leveraged to make a cluster-level privilege escalation

Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with a ClusterRole called edit via ClusterRoleBinding. The "edit" ClusterRole is one of Kubernetes default-created ClusterRole, and it has the create/patch/udpate...

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

A large-scale attack campaign discovered in the wild has been exploiting Kubernetes K8s Role-Based Access Control RBAC to create backdoors and run cryptocurrency miners. "The attackers also deployed DaemonSets to take over and hijack resources of the K8s clusters they attack," cloud security firm...

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

A large-scale attack campaign discovered in the wild has been exploiting Kubernetes K8s Role-Based Access Control RBAC to create backdoors and run cryptocurrency miners. "The attackers also deployed DaemonSets to take over and hijack resources of the K8s clusters they attack," cloud security firm...