Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation

CVE-2023-3893

Summary

A security flaw has been identified in Kubernetes affecting environments where Windows nodes are running the kubernetes-csi-proxy. Specifically, users with the capability to create pods may exploit this vulnerability to escalate their privileges to admin-level access on the affected nodes. This issue emphasizes the need for diligent monitoring and management of permissions within Kubernetes clusters hosting Windows components.

References