Skip to content

CVE record · 1 source

CVE-2026-105312

CVSS 9.9

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image.

Vendor: Kubernetes
Product: Kubernetes
CVSS: 9.9
EPSS: 0.003 (p27)
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 11d ago

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image.

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via…

CVSS 9.9 CVE-2026-105312 Kubernetes