Don't want your Kubernetes Windows nodes hijacked? Patch this hole now

from The Register on 2025-01-24 15:00 (#6TSY2)

SYSTEM-level command injection via API parameter *chef's kiss*

A now-fixed command-injection bug in Kubernetes can be exploited by a remote attacker to gain code execution with SYSTEM privileges on all Windows endpoints in a cluster, and thus fully take over those systems, according to Akamai researcher Tomer Peled....

Source	RSS or Atom Feed
Feed Location	http://www.theregister.co.uk/headlines.atom
Feed Title	The Register
Feed Link	https://www.theregister.com/
Feed Copyright	Copyright © 2025, Situation Publishing