CVE-2026-76654 — Subpath symlinking on Windows nodes permits NTLM coercion

An NTLM coercion vulnerability exists on Windows nodes when a pod volumeMounts subPath is set to a symbolic link pointing to an attacker-controlled network share.