| Package | Affected versions | Patched versions |
|---|---|---|
| k8s.io/kubernetes | ≥ 1.25.0, < 1.25.11≥ 1.26.0, < 1.26.6≥ 1.27.0, < 1.27.3< 1.24.15 | 1.25.111.26.61.27.31.24.15 |
| kubernetes | ≥ 1.25.0, ≤ 1.25.10≥ 1.26.0, ≤ 1.26.5≥ 1.27.0, ≤ 1.27.2≤ 1.24.14 |
Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with ephemeral containers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free