Today's Core Dump is brought to you by ThreatPerspective

The Register - Software

Don't want your Kubernetes Windows nodes hijacked? Patch this hole now

SYSTEM-level command injection via API parameter *chef's kiss*


A now-fixed command-injection bug in Kubernetes can be exploited by a remote attacker to gain code execution with SYSTEM privileges on all Windows endpoints in a cluster, and thus fully take over those systems, according to Akamai researcher Tomer Peled.


Published: 2025-01-24T15:00:08











© Segmentation Fault . All rights reserved.

Privacy | Terms of Use | Contact Us