https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:11:12.167634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03563 bdu:2022-03563 2026-10-06T20:11:12.171243+00:00 bdu:2022-03563 https://cve.radiocsirt.org/vuln/euvd-2026-232795 EUVD-2026-232795 2026-10-06T20:11:12.171295+00:00 EUVD-2026-232795 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23652 fkie_cve-2022-23652 2026-10-06T20:11:12.171317+00:00

capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0.2.1 an attacker with a proper authentication mechanism may use a malicious `Connection` header to start a privilege escalation attack towards the Kubernetes API Server. This vulnerability allows for an exploit of the `cluster-admin` Role bound to `capsule-proxy`. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-9cwv-cppx-mqjm GHSA-9cwv-cppx-mqjm — Improper Authentication in Capsule Proxy 2026-10-06T20:11:12.171366+00:00

Affected: Go: github.com/clastix/capsule-proxy

### Impact

Using a malicious `Connection` header, an attacker with a proper authentication mechanism could start a privilege escalation towards the Kubernetes API Server, being able to exploit the `cluster-admin` Role bound to `capsule-proxy`.

### Patches

Patch has been merged in the v0.2.1 release.

### Workarounds

Upgrading is mandatory.

 https://cve.radiocsirt.org/vuln/gsd-2022-23652 gsd-2022-23652 2026-10-06T20:11:12.171409+00:00 gsd-2022-23652