CVE-2024-39690: falha de alta gravidade em projectcapsule capsule
Capsule tenant owner with "patch namespace" permission can hijack system namespaces
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.5epss 0.5%
Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e., namespaces without the ownerReference field), thereby gaining control of that namespace. Version 0.7.1 contains a patch.
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
projectcapsule · capsuleCVEs relacionadas — projectcapsule capsule
No mesmo produto, das mais perigosas para as menos.
CVE-2026-22872MEDIUMCapsule TenantResource RawItems Cluster-Scoped Resource Creation VulnerabilityEPSS 0.7%CVE-2026-61795MEDIUMCapsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validationEPSS 0.6%CVE-2026-61794MEDIUMCapsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panicEPSS 0.6%CVE-2025-55205CRITICALCapsule tenant owners with "patch namespace" permission can hijack system namespaces labelEPSS 0.5%CVE-2026-55636MEDIUMCapsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotectedEPSS 0.4%CVE-2026-61672HIGHCapsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcementEPSS 0.3%