Skip to content
Threat Feed
Subscribe

Tag

Containerization

2 briefs RSS
high advisory

CVE-2026-17527: Kubernetes CDI Privilege Escalation and Data Exfiltration

A vulnerability in the Containerized Data Importer (CDI) for Kubernetes, identified as CVE-2026-17527, allows privilege escalation and data exfiltration through an improperly configured `cdi.kubevirt.io:view` ClusterRole, enabling attackers with partial access to clone and access data from any PersistentVolumeClaim in the cluster.

Containerized Data Importer containerization kubernetes privilege-escalation data-exfiltration cloud
3t 1c
high advisory

Moby Authorization Plugin Bypass Vulnerability (CVE-2026-34040)

A security vulnerability in Moby (prior to v29.3.1) allows attackers to bypass authorization plugins, potentially leading to unauthorized container access and privilege escalation.

containerization authorization bypass privilege escalation cve-2026-34040
2r 2t 1c