Threats affecting pkg:github/ctfer-io/fullchain

CVE-2026-32769 is a high-severity vulnerability in ctfer-io fullchain versions prior to 0.1.1 caused by an improperly configured NetworkPolicy. This misconfiguration allows a malicious actor who has compromised an application pod to pivot laterally to any pod outside the origin namespace, breaking the expected security-by-default isolation. Exploitation requires no authentication or user interaction and can lead to unauthorized access across namespaces within a Kubernetes cluster. The issue has been fixed in version 0.1.1 by correcting the NetworkPolicy. Until patching, deleting the problematic inter-ns- prefixed NetworkPolicy in the target namespace can mitigate the risk. This vulnerability impacts confidentiality and integrity by enabling lateral movement and potential further compromise within containerized environments.