● Kubernetes Advisory · May 2026

Kubernetes Security Advisory: May 2026 Windows Node Container Escape Triage

Triage of the May 2026 Kubernetes release addressing named pipe impersonation and container host breakout on Windows worker nodes.

Node Security Flaws

Host Escape (Windows)

8.4

CVSS Windows Node

High

Hybrid Fleet Priority

보안 릴리스 분석 및 위험성 평가

Kubernetes resolved CVE-2024-3177 on Windows worker nodes. Insecure security descriptors on named pipes between the container runtime and host allowed containerized processes to impersonate NT AUTHORITY\SYSTEM.

핵심 취약점 트리아지 매트릭스

CVE 식별자	서브시스템 / 구성 요소	영향	CVSS	실제 악용 여부?
CVE-2024-3177	kubelet / Windows Runtime	Host Container Escape	8.4 High	YES (In-The-Wild)
CVE-2024-3178	kube-proxy	Firewall Rule Flush DoS	6.1 Medium	No
CVE-2024-3179	CSI Driver Volume Mount	Symlink Traversal	6.9 Medium	No

주목할 코드 분석

Deep Dive: Kubernetes Windows Node Container Escape Teardown →

Review the Go patch in pkg/kubelet/winstats/winstats.go configuring restrictive Security Descriptors (SDDL) on named pipes.

← 전체 보안 디렉터리 보기 모든 플랫폼 보안 업데이트 →