CVE-2024-32359

—

CVSS 3.1

6.9 medium

EPSS

<1%p13

Published

May 2, 2024 (May 2, 2024)

Modified

Jul 9, 2026

Description

An RBAC authorization risk in Carina v0.13.0 and earlier allows local attackers to execute arbitrary code through designed commands to obtain the secrets of the entire cluster and further take over the cluster.

Weakness: CWE-285
Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.