Kubernetes StatefulSet controller allows cross-namespace pod creation
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-639.
Summary
Kubernetes versions from v1.34.0 through v1.34.11, from v1.35.0 through v1.35.8, from v1.36.0 through v1.36.4, and v1.37.0 are affected. A confused deputy flaw in the StatefulSet controller (CWE-639) lets a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects create a pod in another namespace. The attacker controls the pod's metadata and specification, but the garbage collector deletes the pod unless the attacker can build a valid StatefulSet OwnerReference, which requires the UID of an existing StatefulSet in the victim's namespace.
Written with Claude Haiku 5.5 from the sources below · 2026-10-31
Description from the CNA
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod. An attacker exploiting this vulnerability would have full control over the resulting pod’s metadata and specification, including namespace selection. Note that the cross-namespace pod will be immediately deleted by the garbage collector unless the attacker is able to construct a valid StatefulSet OwnerReference. This would require referencing the UID of an existing StatefulSet in the victim’s namespace.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Kubernetes | Kubernetes | v1.34.0 – v1.34.11; v1.35.0 – v1.35.8; v1.36.0 – v1.36.4; v1.37.0 – v1.37.0 | — | No fix listed | CNA |
- Kubernetes VendorKubernetes Affected v1.34.0 – v1.34.11; v1.35.0 – v1.35.8; v1.36.0 – v1.36.4; v1.37.0 – v1.37.0 Fixed in — No fix listed CNA
CPE names Threatist (inferred) · 1
Inferred from how NVD named this product before; not given by a source.
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:* | — | — | Kubernetes |
- cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:* Versions — — ·Kubernetes
Remediation
The sources list no fixed version for Kubernetes. Red Hat lists Logical Volume Manager Storage, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Edge Manager 1, Red Hat Hardened Images and Red Hat OpenShift Container Platform 4 as affected with no fix available, and other products as well.
Written with Claude Haiku 5.5 from the sources below · 2026-10-31
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Logical Volume Manager Storage | Affected | No fix yet: Fix deferred |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Affected | No fix yet: Fix deferred |
| Red Hat Edge Manager 1 | Affected | No fix yet: Fix deferred |
| Red Hat Hardened Images | Affected | No fix yet |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift GitOps | Affected | No fix yet: Fix deferred |
Timeline
- 2026-10-26 Threatist record created from CVE-2026-2270
- 2026-10-27 Alias added: GHSA-3jhc-p65m-8464
- 2026-10-27 Priority changed: MEDIUM → LOW
- 2026-10-29 CISA SSVC decision points changed
- 2026-10-29 CISA SSVC decision points changed
- 2026-10-31 Affected versions changed · Red Hat
References
More Kubernetes vulnerabilities
- TI-2025-01719 ingress-nginx admission controller RCE escalation CVSS 3.1CRITICAL 9.8
- TI-2018-16130 Improper privilege management in Kubernetes CVSS 3.0CRITICAL 9.8
- TI-2025-00932 ingress-nginx controller - configuration injection via unsanitized mirror annotations CVSS 3.1HIGH 8.8
- TI-2019-08418 Kubernetes kubelet exposes /debug/pprof info on healthz port CVSS 3.1HIGH 8.2
- TI-2026-02839 ingress-nginx rewrite-target nginx configuration injection CVSS 3.1HIGH 8.8
- TI-2025-18233 ingress-nginx controller - configuration injection via unsanitized auth-url annotation CVSS 3.1HIGH 8.8
Sources
- CVE-2026-2270 · CVE Program
- CVE-2026-2270 · NVD
- FIRST EPSS
- GHSA-3jhc-p65m-8464 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-2270 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences