CLEANSTART-2026-FY02366
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FY02366.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2026-FY02366
- Upstream
- Published
- 2026-11-05T08:10:56Z
- Modified
- 2026-11-05T08:30:02Z
- Severity
-
- 2.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containe...
- Details
-
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated.
- References