Threats tagged 'ghsa-fvcc-576m-9wv4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.8	CVE-2026-76654An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a Medium5.82026-10-27GCVE DatabaseCVE-2026-76654 CVE-2026-76654 is an NTLM coercion vulnerability affecting Windows nodes in Kubernetes environments. It occurs when a pod's volumeMount subPath is set to a symbolic link pointing to an attacker-controlled network share. The kubelet resolves the symlink and attempts NTLM authentication to the share, exposing the NetNTLMv2 hash of the kubelet's running account. This hash could be cracked or relayed to impersonate the node if it is domain-joined. Report on CVE-2026-76654 Vulnerability CWE-59 #ghsa-fvcc-576m-9wv4	GCVE Database	2026-10-27

Page 1 of 1