About this document
CVE 2026 3355 K8sAdmission Bypass by Baha Baghdadi is a document available to read on EtoBox.
CVE-2026-3355 describes a hypothetical policy bypass in a fictional Kubernetes admission controller that allows attackers to deploy pods by exploiting alias resource names. The root cause is that the admission webhook matches on raw strings rather than normalized resource identifiers, leading to potential security breaches. Mitigation strategies include updating the admission controller to match normalized identifiers and implementing additional security measures in sensitive namespaces.
- Author
- Baha Baghdadi
- Language
- EN