CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – hostPath にマウントされた Kubernetes Service Account トークン プログラムコード（YAML + Python エクスプロイト） root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec: containers: - name: ap...

CVE-2026-84200

A flaw was found in Kyverno. This policy exception handling flaw allows a remote attacker to bypass security policies. By crafting a resource name that matches a less restrictive exception pattern, an attacker can circumvent policies, such as those blocking hostPath volumes, leading to unauthoriz...

SUSE CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

CVE-2026-84200: Improper Access Control

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive exception takes precedence, allowing an attacker to bypass the policy by crafting a resource name that matches the second...

PT-2026-84161

Name of the Vulnerable Software and Affected Versions Kyverno versions v1.9.0 through v1.12.7 Description A flaw exists in the policy exception handling when a policy is set to enforce mode and combined with two PolicyExceptions. The system incorrectly allows a less restrictive exception to take...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: spark-operator, rancher-webhook-fips, ip-masq-agent, aws-ebs-csi-driver, local-static-provisioner, aws-efs-csi-driver, rancher-webhook, argocd-image-updater, argocd-image-updater-fips, kubernetes, kubernetes-csi-driver-hostpath, aws-efs-csi-driver-fips,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, eks-distro, argo-cd-fips, longhorn-manager, longhorn-manager-fips, azuredisk-csi, harvester-fips, cluster-autoscaler-fips, longhorn-share-manager, rancher-system-agent, azurefile-csi-fips, kubernetes-csi-driver-hostpath, azurefile-csi, harvester,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terragrunt, spicedb, grpc-health-probe, kwok, kubernetes-csi-driver-hostpath, fulcio, falcosidekick, dbmate, opentelemetry-collector, certificate-transparency, melange, minio, sops, trivy, hubble-ui, k3s, step, pulumi-language-dotnet, opa,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater, cri-tools, spark-operator, local-static-provisioner, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, k8s-device-plugin, ip-masq-agent, kubeflow-pipelines, nodetaint...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, aws-efs-csi-driver, argocd-image-updater, rancher-fleet, argo-rollouts, emissary, local-static-provisioner, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, vcluster, kapp, nodetaint, kubernetes-csi-driver-nfs...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: harbor-cli, cni-plugins, containerd, nri-consul, nri-mysql, cluster-api-helm-controller, kubernetes-csi-driver-hostpath, kind, dive, falcoctl, libnvidia-container, thanos-operator, k3s, conftest, kapp, kyverno-notation-aws, kpt, eksctl, kapp-controller,...

Exploit for CVE-2026-21008

--- CVE-2026-21008 – Kubernetes Service Account Token Mounte...

CVE-2026-44180

CVE-2026-44180 affects Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be bypassed to run kernels as root by supplying KERNEL_UID/KERNEL_GID values with whitespace. Affected versions: 2.0.0rc1 through

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kubernetes-csi-driver-hostpath...

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

Local Path Provisioner Vulnerable to HelperPod Template Injection

Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...