CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – Kubernetes Service Account Token Mounted in HostPath Program Code YAML + Python exploit vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec: containers: - name: app image:...

PT-2026-108894

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

CVE-2026-76061 Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass

A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...

CVE-2026-76061

A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...

BIT-KYVERNO-2026-84200 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

PT-2026-98995

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200

A flaw was found in Kyverno. This policy exception handling flaw allows a remote attacker to bypass security policies. By crafting a resource name that matches a less restrictive exception pattern, an attacker can circumvent policies, such as those blocking hostPath volumes, leading to unauthoriz...

SUSE CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200: Improper Access Control

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: longhorn-manager-fips, azurefile-csi-fips, azurefile-csi, harvester-fips, longhorn-share-manager, azuredisk-csi, harvester, rancher-system-agent, longhorn-share-manager-fips, rke2-runtime-fips, longhorn-manager, eks-distro, cluster-autoscaler-fips, argo-cd-fips,...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, kubernetes, argocd-image-updater, rancher-webhook, aws-efs-csi-driver-fips, argocd-image-updater-fips, local-static-provisioner, nodetaint, kubeflow-pipelines, ip-masq-agent, spark-operator, aws-ebs-csi-driver, aws-efs-csi-driver,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, spegel, smarter-device-manager, fulcio, sigstore-scaffolding, zot, conftest, grpc-health-probe, spicedb, k8sgpt, kaniko, kubernetes-csi-external-provisioner, restic, spire-server, zarf, ferretdb, cert-manager-cmctl, k3d, trivy, dbmate, terraform-docs...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, spark-operator, kubeflow-pipelines, nodetaint, cri-tools, kubernetes-dns-node-cache, ip-masq-agent, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, k8s-device-plugin...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: rancher-fleet, argo-rollouts, kubernetes-csi-driver-hostpath, spark-operator, nodetaint, emissary, yunikorn-k8shim, kapp, kubernetes-csi-driver-nfs, ip-masq-agent, kubernetes-dns-node-cache, argocd-image-updater, kubernetes, vcluster, aws-efs-csi-driver,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, kuberlr, gcsfuse, kor, swagger, zot, azure-service-operator, k8sgpt, cluster-api-provider-vsphere, nri-redis, kubernetes-dashboard, aactl, libnvidia-container, prometheus-operator, caddy, grafana-alloy, nodetaint, gobuster, kpt,...

Exploit for CVE-2026-21008

--- CVE-2026-21008 – Kubernetes Service Account Token Mounte...

Kubernetes List Pods

Lists pods in a namespace or all namespaces and flags privileged / hostPath containers !/usr/bin/env python3 -- coding: utf-8 -- """Kubernetes Pods gather — list pods and summarize privileged / hostPath risks.""" from kittysploit import from lib.protocols.kubernetes.kubernetessessionmixin import...