Kubernetes (kubelet, kube-controller-manager): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 5.9
  CVE-2026-2270

  StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

  A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod. An attacker exploiting this vulnerability would have full c…

  Kubernetes Kubernetes kubernetes kubernetes Debian Azure Linux
  Oct 26, 2026
• Medium 5.8
  CVE-2026-76654

  Subpath symlinking on Windows nodes permits NTLM coercion

  An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves…

  Kubernetes Kubernetes kubernetes Azure Linux
  Oct 26, 2026

Revision history

1. 2026-11-03 #3

   Neue Updates von Red Hat aufgenommen

2. 2026-10-26 #2

   Referenz(en) aufgenommen: EUVD-2026-110501, EUVD-2026-110500

3. 2026-09-23 #1

   Initiale Fassung

References

• GitHub Issue vom 2026-09-23
  https://github.com/kubernetes/kubernetes/issues/142097
• GitHub Issue vom 2026-09-23
  https://github.com/kubernetes/kubernetes/issues/142098
• Kubernetes Security Advisory vom 2026-09-23
  https://discuss.kubernetes.io/t/security-advisory-cve-2026-2270-statefulset-and-controllerrevision-write-permissions-allow-cross-namespace-pod-creation/35276
• Kubernetes Security Advisory vom 2026-09-23
  https://discuss.kubernetes.io/t/security-advisory-cve-2026-76654-subpath-symlinking-on-windows-nodes-permits-ntlm-coercion/35277
• Red Hat Security Advisory RHSA-2026:94562 vom 2026-11-03
  https://access.redhat.com/errata/RHSA-2026:94562