CVE-2024-39690 | BDVDB-2026-246145 Detail

Description#

Capsule is a multi-tenancy and policy-based framework for Kubernetes. In Capsule v0.7.0 and earlier, the tenant-owner can patch any arbitrary namespace that has not been taken over by a tenant (i.e., namespaces without the ownerReference field), thereby gaining control of that namespace. Version 0.7.1 contains a patch.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-08-20Record published in the CVE List.
2. Version 22025-08-14Most recent update recorded in the CVE List.