{"id":"CVE-2026-2270","kind":"vulnerability","aliases":["CVE-2026-2270"],"related":[],"title":"Kubernetes: StatefulSet controller lets namespace writers create pods elsewhere","description":"A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod. An attacker exploiting this vulnerability would have full control over the resulting pod’s metadata and specification, including namespace selection. Note that the cross-namespace pod will be immediately deleted by the garbage collector unless the attacker is able to construct a valid StatefulSet OwnerReference. This would require referencing the UID of an existing StatefulSet in the victim’s namespace.","summary":"A user with write access to StatefulSets and ControllerRevisions in one namespace can make the StatefulSet controller create a pod in another namespace. The attacker controls that pod's metadata and spec, but the garbage collector deletes it unless the attacker also knows the UID of a StatefulSet in the victim namespace.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kubernetes","multi-tenant-clusters"],"not_affected_if":["no-namespace-scoped-statefulset-write","single-tenant-cluster"],"how_to_check":"- unknown","fix":null,"status":"open","published_at":"2026-10-26T23:17:00+00:00","first_seen_at":"2026-10-26T23:25:48+00:00","triaged_at":"2026-10-26T23:25:59+00:00","updated_at":"2026-10-26T23:25:59+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T23:25:59Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Kubernetes: StatefulSet controller lets namespace writers create pods elsewhere","impact":"medium","summary":"A user with write access to StatefulSets and ControllerRevisions in one namespace can make the StatefulSet controller create a pod in another namespace. The attacker controls that pod's metadata and spec, but the garbage collector deletes it unless the attacker also knows the UID of a StatefulSet in the victim namespace.","category":"infrastructure","nicknames":[],"who_cares":["kubernetes","multi-tenant-clusters"],"confidence":0.5,"needs_auth":"yes","worst_case":"Attacker creates pods in other namespaces with arbitrary spec","analyst_note":"Find the NVD record's affected Kubernetes versions and fixed releases, and the upstream advisory, to fill how_to_check and fix.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["single-tenant-cluster","no-namespace-scoped-statefulset-write"],"who_is_affected":"Clusters where tenants or teams hold namespace-scoped write permissions on StatefulSet and ControllerRevision objects, so that a namespace boundary is meant to separate them. Single-tenant clusters where every namespace user is trusted are less exposed. unknown whether a specific Kubernetes version is patched; the sources do not say.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000602,"input_tokens":3405,"output_tokens":523,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-2270':12A,15A 'abl':144C 'access':26B 'allow':84C 'also':63B 'anoth':43B 'attack':46B,62B,77C,106C,142C 'cluster':21B 'collector':57B,139C 'confus':75C 'construct':146C 'control':3A,38B,47B,82C,113C 'controllerrevis':30B,96C 'creat':7A,39B,99C 'cross':102C,129C 'cross-namespac':101C,128C 'cve':10A,13A 'delet':58B,135C 'deputi':76C 'elsewher':9A 'exist':78C,159C 'exploit':107C 'full':112C 'garbag':56B,138C 'immedi':134C 'includ':122C 'infrastructur':16B 'know':64B 'kubernet':1A,17B 'let':4A 'make':35B 'metadata':51B,119C 'multi':19B 'multi-tenant-clust':18B 'namespac':5A,33B,44B,73B,89C,103C,123C,130C,165C 'namespace-scop':88C 'note':125C 'object':97C 'one':32B 'ownerrefer':150C 'permiss':92C 'pod':8A,41B,49B,104C,117C,131C 'referenc':154C 'requir':153C 'result':116C 'scope':90C 'select':124C 'spec':53B 'specif':121C 'statefulset':2A,28B,37B,69B,81C,94C,149C,160C 'tenant':20B 'uid':66B,156C 'unless':60B,140C 'user':23B,86C 'valid':148C 'victim':72B,163C 'vulner':109C 'would':110C,152C 'write':25B,91C 'writer':6A","nicknames":[],"mitigations":[],"who_affected":"Clusters where tenants or teams hold namespace-scoped write permissions on StatefulSet and ControllerRevision objects, so that a namespace boundary is meant to separate them. Single-tenant clusters where every namespace user is trusted are less exposed. unknown whether a specific Kubernetes version is patched; the sources do not say.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T23:17:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss_by":"jordan@liggitt.net","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-2270","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2270","severity":null,"published_at":"2026-10-26T23:17:00+00:00","modified_at":"2026-10-26T23:17:00+00:00","first_seen_at":"2026-10-26T23:25:48+00:00","fetched_at":"2026-10-26T23:25:48+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}