Skip to content
Threat Feed
Subscribe

Product

SPIRE Agent

1 brief RSS
high advisory

SPIFFE/SPIRE Identity Spoofing via Node-Level Compromise

An attacker with root access on a Kubernetes node can manipulate cgroup metadata to deceive the SPIRE agent, allowing for the unauthorized harvesting of SVIDs belonging to co-located workloads.

SPIRE Agent +1 identity kubernetes spiffe spire spoofing cloud-security
2t