CVE-2023-1260

score

<0.1

cvss

8.0

epss

1.6%

published

2023-09-24

kev added

—

first seen

2026-10-21

kube-apiserver contains an authentication bypass caused by improper permission checks on the pods/ephemeralcontainers subresource, letting a remote authenticated attacker with update, patch permissions bypass restrictions and potentially control privileged pods, exploit requires attacker to have update, patch permissions.