Database/Container, Kubernetes & orchestration
Cilium: Agent pod hostPath allows writing to /opt/cni/bin, replacing the CNI binary on the host
CVE-2023-27593Container, Kubernetes & orchestrationcurated
Impact
Agent pod hostPath allows writing to /opt/cni/bin, replacing the CNI binary on the host
Who can reach it
Attacker with access to a Cilium agent pod
What to do
Rolling Cilium upgrade; restrict who can exec into kube-system
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.