NetworkPolicy Misconfiguration in Fullchain Platform by CTFer

CVE-2026-32769

What is CVE-2026-32769?

The Fullchain platform, designed for deploying a ready-to-use Capture The Flag (CTF) environment, has a vulnerability that allows attackers to exploit a misconfigured NetworkPolicy. This flaw, present in versions prior to 0.1.1, can lead to unauthorized lateral movement across the deployment's pods. Specifically, a compromised application can pivot to any Pod outside its origin namespace due to the incorrect inter-namespace NetworkPolicy configuration. This undermines the expected security boundaries, facilitating potential unauthorized access. Users are advised to upgrade to version 0.1.1 or delete the misconfigured network policy prefixed by inter-ns- in the target namespace as a temporary workaround.

References