CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret.
{ "nvd_published_at": "2023-04-12T06:15:00Z", "cwe_ids": [ "CWE-732" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-04-12T20:40:15Z" }