Boletines de Vulnerabilidades

CVE-2025-59358

   
Software afectado KUBERNETES
 
The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-59358