CLEANSTART-2026-ER07763: security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/nfs-subdir-external-provisionerto a version that resolves this vulnerability.Fixed in 4.0.2-r4
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The issue is remotely reachable and requires low-level privileges. It does not require user interaction, but the attack complexity is rated high.
What is the expected impact if exploitation succeeds?
Successful exploitation may allow a user to cause network traffic to be sent to locations they would not otherwise be able to access. The reported impact is limited to low confidentiality impact, with no integrity or availability impact indicated.