CVE-2022-3294

score

<0.1

cvss

6.6

epss

1.6%

published

2023-03-01

kev added

—

first seen

2026-10-21

Kubernetes clusters with untrusted user access to Node objects contain a validation bypass bug in kube-apiserver's node proxying, letting authenticated requests access the API server's private network, exploit requires untrusted user modification of Node objects.