CVE-2026-84173

Eclipse Ankaios versions v0.5.1 through v1.0.1 contain a flaw in the agent-side Control Interface authorizer: multi-segment allow rules whose first path segment is a wildcard (e.g., *.workloads.some_workload) are incorrectly evaluated when a workload sends a CompleteStateRequest or UpdateStateRequest with an empty field mask. The empty-mask request is wrongly authorized as matching the scoped rule, so an authenticated workload can read the complete cluster state or replace state outside the subtree it was restricted to. An attacker gains unauthorized disclosure or modification of other workloads' configuration and cluster state, though exploitation requires the workload to already be running with a scoped allow rule (local vector, high privileges per the CVSS 4.0 score of 8.3). Only deployments that use wildcard-leading multi-segment allow rules are affected; a rule consisting solely of * is intentionally unrestricted and unaffected. No public proof of concept, CISA KEV listing, or in-the-wild exploitation is known, and EPSS estimates only a 0.1% probability of exploitation within 30 days.

What to do: Upgrade to an Ankaios release that includes the authorizer fix (anything after v1.0.1) as soon as one is available. Until then, replace multi-segment Control Interface allow rules that begin with a wildcard, such as *.workloads.some_workload, with explicit paths like desiredState.workloads.some_workload, and audit authenticated workloads with scoped rules for unexpected full-state reads or out-of-scope state changes.