CVE-2026-78427
2026-09-17
10h17 +00:00
10h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission deny rules simply by naming their image path after one of these sidecar images.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Reliance on Untrusted Inputs in a Security Decision The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. |
