● Kubernetes Advisory · May 2026

Kubernetes Security Advisory: May 2026 Windows Node Container Escape Triage

Triage of the May 2026 Kubernetes release addressing named pipe impersonation and container host breakout on Windows worker nodes.

Node Security Flaws

Host Escape (Windows)

8.4

CVSS Windows Node

High

Hybrid Fleet Priority

सुरक्षा समीक्षा और जोखिम विश्लेषण

Kubernetes resolved CVE-2024-3177 on Windows worker nodes. Insecure security descriptors on named pipes between the container runtime and host allowed containerized processes to impersonate NT AUTHORITY\SYSTEM.

संवेदनशील कमियों की विस्तृत तालिका

CVE पहचानकर्ता	सबसिस्टम / घटक	प्रभाव	CVSS	सक्रिय हमला?
CVE-2024-3177	kubelet / Windows Runtime	Host Container Escape	8.4 High	YES (In-The-Wild)
CVE-2024-3178	kube-proxy	Firewall Rule Flush DoS	6.1 Medium	No
CVE-2024-3179	CSI Driver Volume Mount	Symlink Traversal	6.9 Medium	No

सोर्स कोड का गहन विश्लेषण

Deep Dive: Kubernetes Windows Node Container Escape Teardown →

Review the Go patch in pkg/kubelet/winstats/winstats.go configuring restrictive Security Descriptors (SDDL) on named pipes.

← सम्पूर्ण सुरक्षा निर्देशिका सभी सुरक्षा पैच अपडेट्स →