Advisories

Privilege escalation to cluster admin via AppProject bypass in PreDelete/PostDelete hooks

RCE in the repo-server via an SSH repository proxy URL

Privilege escalation from namespace-scoped user to cluster admin

RCE on the admin workstation via Link clusterCredentialsSecret

Privilege escalation from namespace-scoped user to cluster admin

Privilege escalation from namespace-scoped user to cluster admin

Privilege escalation to Talos/k8s cluster-admin via role-less certificate and talos-role header injection

RCE on the admin workstation from a compromised Talos node

Privilege escalation from os:meta:writer role to Talos/k8s cluster-admin

Image verification policy bypass

DoS to node reboot from a read-only access role

Privilege escalation from namespace-scoped user to cluster admin

Privilege escalation from namespace-scoped user to cluster-wide secrets reader

RCE in operator workload via FluentdConfig

Privilege escalation from namespace-scoped user to cluster admin

Privilege escalation from namespace-scoped user to cluster-wide secrets reader

Privilege escalation from namespace-scoped user to cluster admin