CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – hostPath にマウントされた Kubernetes Service Account トークン プログラムコード（YAML + Python エクスプロイト） root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec: containers: - name: ap...

CVE-2026-84200

A flaw was found in Kyverno. This policy exception handling flaw allows a remote attacker to bypass security policies. By crafting a resource name that matches a less restrictive exception pattern, an attacker can circumvent policies, such as those blocking hostPath volumes, leading to unauthoriz...

SUSE CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200: Improper Access Control

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

PT-2026-84161

Name of the Vulnerable Software and Affected Versions Kyverno versions v1.9.0 through v1.12.7 Description A flaw exists in the policy exception handling when a policy is set to enforce mode and combined with two PolicyExceptions. The system incorrectly allows a less restrictive exception to take...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, azuredisk-csi, longhorn-manager-fips, azurefile-csi, rke2-runtime-fips, harvester, eks-distro, cluster-autoscaler-fips, longhorn-manager, longhorn-share-manager, azurefile-csi-fips, harvester-fips, kubernetes-csi-driver-hostpath, rancher-system-agent,...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver-fips, spark-operator, nodetaint, aws-ebs-csi-driver, argocd-image-updater, rancher-webhook, ip-masq-agent, rancher-webhook-fips, local-static-provisioner, kubernetes, kubeflow-pipelines, argocd-image-updater-fips,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terragrunt, kaniko, pulumi-language-dotnet, cloudnative-pg, rqlite, smarter-device-manager, kwok, step-ca, sops, step, spegel, ksops, melange, grafana-agent-operator, trivy, kots, k3s, opentelemetry-collector-contrib, temporal, zot, cert-manager-cmctl, spicedb,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: cri-tools, aws-efs-csi-driver, ip-masq-agent, nodetaint, kubeflow-pipelines, spark-operator, kubernetes-csi-driver-hostpath, local-static-provisioner, argocd-image-updater, k8s-device-plugin, kubernetes-dns-node-cache...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, aws-efs-csi-driver, rancher-fleet, kubernetes-csi-driver-nfs, nodetaint, spark-operator, argo-rollouts, kubernetes-csi-driver-hostpath, local-static-provisioner, vcluster, argocd-image-updater, yunikorn-k8shim, emissary, kapp, kubernetes,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, chart-testing, hubble, kpt, controller-gen, cluster-api-provider-vsphere, k3s, dgraph, tkn, mongo-tools, zot, nri-rabbitmq, aws-privateca-issuer, pluto, delve, clickhouse-operator, grafana-alloy, aws-otel-collector, helm-push, rclone, conftest, guac,...

Exploit for CVE-2026-21008

--- CVE-2026-21008 – Kubernetes Service Account Token Mounte...

CVE-2026-44180

CVE-2026-44180 affects Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be bypassed to run kernels as root by supplying KERNEL_UID/KERNEL_GID values with whitespace. Affected versions: 2.0.0rc1 through

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

Local Path Provisioner Vulnerable to HelperPod Template Injection

Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...