EUVD-2026-75427

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

CVE-2026-88877 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

CVE-2026-88877 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

CVE-2026-88877 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

ingress-nightmare

IngressNightmare CVE-2025-1974 このPythonスクリプトは、Ingress NGINX Controllerを実行しているかどうか、また実行している場合に既知の脆弱性のあるバージョンを使用しているかどうかを確認するのに役立ちます。 使用方法 まず、uv をこちらからインストールし、その後Kubernetesクラスターに対してスクリプトを実行して監査します。 root@kitploit: uv run --with kubernetes,packaging check.py サンプル出力 脆弱なクラスター: root@kitploit: Checking f...

CVE-2025-1974-PoC-exploit

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx 远程代码执行RCEIngressNightmare root@kitploit: ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit...

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover 一份关于 CVE-2025-59359（Chaos-Mesh 中的一个关键 OS 命令注入漏洞）的实操取证演练。了解攻击者如何通过 GraphQL 变异劫持 Kubernetes 集群，以及如何使用 ELK 检测、分析和报告此类入侵。 作者：Mark Mallia 执行摘要 CVE-2025-59359 暴露了 Chaos-Mesh 的 Controller Manager 中存在的一个关键 OS 命令注入缺陷。该漏洞允许攻击者在 Kubernetes Pod...

Important: Red Hat Security Advisory: external secrets operator for Red Hat OpenShift 1.2.1

external secrets operator for Red Hat OpenShift 1.2.1 The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager,...

CVE-2026-80352

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

CVE-2026-80352

CVE-2026-80352 is a YAML injection vulnerability in Apache Camel K , specifically in the Master trait serviceAccountName field of custom resource configuration. An authorized CR author can inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges...

EUVD-2026-75290

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

CVE-2026-80352 Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

CVE-2022-3294

エクスプロイト参照: https://github.com/kubernetes/kubernetes/issues/113757 https://github.com/kubernetes/kubernetes/issues/119640 https://github.com/kubernetes/sig-security/blob/main/sig-security-external-audit/security-audit-2021-2022/findings/Kubernetes%20v1.24%20Final%20Report.pdf 列挙: 1...

d8-copy-fail-mitigation

CVE-2026-31431 に対する Deckhouse Kubernetes Platform の緩和策 言語: 英語 | Русский 脆弱性について CVE-2026-31431 は、Linux カーネルの algifaead モジュールにおける脆弱性です。このモジュールは、AFALG ソケットファミリを通じてカーネル暗号 API をユーザ空間に公開します。AEAD（認証付き暗号化と関連データ）インターフェースの欠陥により、ローカルの非特権ユーザーが細工された scattter-gather...

yc-mk8s-copy-fail-mitigation

Copy Fail / Dirty Frag 缓解措施（适用于 Yandex Managed Kubernetes） 自动为 Yandex Managed Kubernetes 集群的所有 worker 节点应用针对 Linux 内核漏洞 CVE-2026-31431、CVE-2026-43284 和 CVE-2026-43500 的缓解措施。 漏洞描述 CVE 标识符（CVE ID）： CVE-2026-43284、CVE-2026-43500 CVE 链接： https://nvd.nist.gov/vuln/detail/CVE-2026-43284 原始报告： Dirty...

grafana-cve-2021-43798

grafana-cve-2021-43798 此仓库包含用于复现该漏洞的文件。 使用以下命令将其部署到您的集群中。 kubectl apply -f grafana-vuln-app.yaml...

CVE-2026-34940

CVE-2026-34940 — OS Command Injection in KubeAI via Model URL in Ollama startup probe Severity : High CVSS 8.7 CWE : CWE-78 — Improper Neutralization of Special Elements used in an OS Command Affected : github.com/kubeai-project/kubeai = 0.23.1 Fixed in : 0.23.2 Advisory : GHSA-324q-cwx9-7crr NVD...

Dirty-Frag-Kubernetes-PoC

Dirty Frag CVE-2026-43284 — Kubernetes 容器逃逸 PoC 一个概念验证，演示默认、非特权 Kubernetes Pod 如何通过共享容器镜像层利用 Dirty Frag Linux 内核页缓存损坏漏洞，在 Amazon EKS 上实现节点级代码执行 。 核心攻击原语是：任何与攻击者控制的容器共享镜像层的特权 DaemonSet 都可以被武器化用于容器逃逸 。本 PoC 以 kube-proxy 作为具体示例，但该技术可推广到集群中的任何特权工作负载。 已在 Amazon EKS （内核 6.12.80）上验证 — 非特权 Pod 通过特权...

CVE-2021-25741

关于 这是针对 CVE-2021-25741 漏洞的利用程序。 该漏洞允许在新建的 POD 中以读写权限挂载 Node 文件系统。 你可以在这里了解更多关于该漏洞的信息： https://security.googleblog.com/2021/12/exploring-container-security-storage.html 我不是该漏洞的作者，只是编写了这个利用程序。 感谢 @russtone 和 @maximusfox 在利用程序开发过程中提供的帮助。 条件 1. 你拥有创建新 POD 的权限 2. 节点运行存在漏洞的 kubelet 存在漏洞的 kubelet 版本：...