CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – Kubernetes 服务账户令牌被挂载至 HostPath 程序代码（YAML + Python 漏洞利用） vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec: containers: - name: app image: nginx volumeMounts: - mountPath:...