Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

CVE-2023-1943

Summary

A privilege escalation vulnerability exists in kOps when operating with the GCE/GCP Provider in Gossip Mode. This flaw could potentially allow unauthorized users to gain elevated access privileges within the Kubernetes environment, posing a significant risk to system security and data integrity. Users of kOps should ensure that they are following best practices for configuration and security to mitigate this risk.

References