CVE-2026-10059

Summary

The flaw allows a tenant administrator with namespace-scoped privileges to escalate their permissions by creating a namespaced ClusterCurator, leading to full cluster control.

Exploitability

Exploitation requires a tenant administrator with specific privileges and knowledge of the ClusterCurator feature. The vulnerability is relatively hard to exploit due to the required access level.

Blast radius

If exploited, the tenant administrator gains full control over the cluster, potentially leading to widespread damage or data loss.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the ClusterCurator feature or restrict access to it strictly to users with the necessary permissions.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.