CVE-2023-2728

score

<0.1

cvss

6.5

epss

2.2%

published

2023-07-03

kev added

—

first seen

2026-10-21

Kubernetes clusters using the ServiceAccount admission plugin with the 'kubernetes.io/enforce-mountable-secrets' annotation and ephemeral containers contain a secrets policy bypass caused by insecure container mounting, letting users reference secrets outside the specified list, exploit requires specific cluster configuration.