CERT24CVE-2026-2270 — StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationLoading data…
CERT24Threat Observatory
Period

CVE-2026-2270 — StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod.

← Back to intelligence

CVE-2026-2270 — StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod.