CLEANSTART-2026-UA46955

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-UA46955.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLEANSTART-2026-UA46955
Upstream
Published
2026-10-31T12:06:48Z
Modified
2026-10-31T16:02:35Z
Severity
  • 2.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containe...
Details

Security vulnerability affects the nodetaint package. A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated.

References

Affected packages

CleanStart / nodetaint

Package

Name
nodetaint
Purl
pkg:apk/cleanstart/nodetaint

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.0.4-r1

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-UA46955.json"