Skip to content
OpenAdvisories

Vendor

kubean-io

1 known vulnerabilities.

Products

kubean 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2024-41820

    Cluster-level privilege escalation in kubean

    Kubean is a cluster lifecycle management toolchain based on kubespray and other cluster LCM engine. The ClusterRole has `*` verbs of `*` resources. If a malicious user can access the worker node which has kubean's deployment, he/she can abuse these excessive …

    kubean-io kubean github.com/kubean-io/kubean Go