https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T15:43:05.933682+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2023-08526 bdu:2023-08526 2026-10-02T15:43:05.936236+00:00 bdu:2023-08526 https://vulnerability.circl.lu/vuln/fkie_cve-2023-30512 fkie_cve-2023-30512 2026-10-02T15:43:05.936281+00:00

CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret.

 https://vulnerability.circl.lu/vuln/ghsa-9337-8c6c-c2xg GHSA-9337-8c6c-c2xg — CubeFS allows Kubernetes cluster-level privilege escalation 2026-10-02T15:43:05.936319+00:00

Affected: Go: github.com/cubefs/cubefs

CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret.

 https://vulnerability.circl.lu/vuln/gsd-2023-30512 gsd-2023-30512 2026-10-02T15:43:05.936349+00:00 gsd-2023-30512