Cloudanix VulnDB

GHSA-hxm7-9q36-c77f

Critical · 9.8

Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace

CVSS

9.8

EPSS

—

Published

Mar 16, 2026

CISA due date

—

The record

Due to a mis-written NetworkPolicy, a malicious actor can pivot from a subverted application to any Pod out of the origin namespace. This breaks the security-by-default property expected as part of the deployment program, leading to a potential lateral movement.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities