TI-2024-26614 CVE-2024-39690 · GHSA-mq69-4j5w-3qwp
Capsule tenant owner with "patch namespace" permission can hijack system namespaces
Priority HIGH 73
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
projectcapsule
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
projectcapsule records in CISA KEVNo projectcapsule vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2025-34881 CVE-2025-55205 · GHSA-fcpm-6mxq-m5vv
Capsule tenant owners with "patch namespace" permission can hijack system namespaces label
Priority HIGH 72
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2026-18364 CVE-2026-22872 · GHSA-qjjm-7j9w-pw72
Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability
Priority HIGH 70
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2026-44157 CVE-2026-61672 · GHSA-gjw4-3v3v-rqxg
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement
Priority MEDIUM 64
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2026-46911 CVE-2026-65834 · GHSA-68cj-mvg9-rgm2
Improper input validation in projectcapsule capsule
Priority MEDIUM 63
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2026-44232 CVE-2026-61794 · GHSA-gxjc-74v5-3vx3
Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic
Priority MEDIUM 63
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2026-46912 CVE-2026-65835 · GHSA-jr6p-8pjj-mfx6
Improper privilege management in projectcapsule capsule
Priority MEDIUM 62
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2026-23788 CVE-2026-30963 · GHSA-2ww6-hf35-mfjm
Capsule Namespace Hijacking via subresource
Priority MEDIUM 52
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2023-26175 CVE-2023-48312 · GHSA-fpvw-6m5v-hqfp
Authentication bypass using an empty token in capsule-proxy
Priority MEDIUM 43
capsule-proxy is a reverse proxy for the capsule operator project.
TI-2026-44233 CVE-2026-61795 · GHSA-f94q-w3w8-cj67
Incorrect comparison in projectcapsule capsule
Priority LOW 31
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2026-40163 CVE-2026-55636 · GHSA-gwxr-7h77-7777
Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected
Priority LOW 26
Capsule is a multi-tenancy and policy-based framework for Kubernetes.
TI-2023-24881 CVE-2023-46254 · GHSA-6758-979h-249x
Service accounts can see namespaces of other tenants in capsule-proxy
Priority LOW 21
capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework.