https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:17:08.834937+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-55205 CVE-2025-55205 — Capsule tenant owners with "patch namespace" permission can hijack system namespaces label 2026-10-06T22:17:08.856181+00:00

Affected: projectcapsule capsule

Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authenticated tenant users to inject arbitrary labels into system namespaces (kube-system, default, capsule-system), bypassing multi-tenant isolation and potentially accessing cross-tenant resources through TenantResource selectors. This vulnerability enables privilege escalation and violates the fundamental security boundaries that Capsule is designed to enforce. This vulnerability is fixed in 0.10.4.