Network Policy Misconfiguration in Chall-Manager Affects Kubernetes Deployments

CVE-2026-32768

What is CVE-2026-32768?

Chall-Manager, a platform-agnostic system that initiates Challenges on Demand, suffered from a misconfiguration in its NetworkPolicy prior to version 0.6.5. This flaw allows a malicious actor to pivot from one instance to any Pod outside of the original namespace, undermining the security-by-default principle integral to its deployment. Specifically, within the context of sdk/kubernetes.Kompose, the instances are not properly isolated, posing a significant risk for lateral movement across the Kubernetes environment. This vulnerability has been addressed in the release of version 0.6.5.

References