VDB
GO-2024-2746
GO-2024-2746
PUBLISHED
Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | kubernetes-1.28 | 0, 0, 0 |
| wolfi | spark-operator | 0, 0, 0 |
| chainguard | aws-efs-csi-driver-fips | 0, 0 |
| chainguard | local-static-provisioner | 0, 0 |
| wolfi | aws-efs-csi-driver | 0, 0, 0 |
| chainguard | argocd-image-updater-fips | 0, 0 |
| chainguard | spark-operator | 0, 0 |
| chainguard | kubernetes-1.28 | 0, 0 |
| chainguard | rancher-webhook-0.4 | 0, 0 |
| chainguard | rancher-webhook-fips-0.4 | 0, 0 |
| chainguard | aws-ebs-csi-driver | 0, 0 |
| wolfi | nodetaint | 0, 0, 0 |
| wolfi | argocd-image-updater | 0, 0, 0 |
| chainguard | aws-efs-csi-driver | 0, 0 |
| wolfi | kubernetes-dns-node-cache | 0, 0, 0 |
| chainguard | kubernetes-csi-driver-hostpath | 0, 0 |
| wolfi | local-static-provisioner | 0, 0, 0 |
| chainguard | ip-masq-agent | 0, 0 |
| chainguard | kubernetes-dns-node-cache | 0, 0 |
| chainguard | kubeflow-pipelines | 0, 0 |
…and 6 more
Timeline
- Jun 4, 2024 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://groups.google.com/g/kubernetes-security-announce/c/JxjHf7fkVd8/m/oVCzypyOAQAJ url
- https://github.com/advisories/GHSA-pxhw-596r-rwq5 advisory
- https://github.com/kubernetes/kubernetes/commit/7c861b1ecad97e1ab9332c970c9294a72065111a fix
- https://github.com/kubernetes/kubernetes/issues/124336 discussion