CVE-2024-3177

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.

• CWE-20

• https://github.com/kubernetes/kubernetes/issues/124336
• https://groups.google.com/g/kubernetes-security-announce/c/JxjHf7fkVd8/m/oVCzypyOAQAJ
• http://www.openwall.com/lists/oss-security/2024/04/16/4
• https://github.com/kubernetes/kubernetes/issues/124336
• https://groups.google.com/g/kubernetes-security-announce/c/JxjHf7fkVd8/m/oVCzypyOAQAJ
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WL54MTLGMTBZZO5PYGEGEBERTMADC4WC/

Published

Apr 22, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31755cJSON v1.7.17 was discovered to contain a segmentation viola…7.6
• CVE-2024-31756An issue in MarvinTest Solutions Hardware Access Driver v.5.…7.8
• CVE-2024-31757An issue in TeraByte Unlimited Image for Windows v.3.64.0.0 …7.8
• CVE-2024-31759An issue in sanluan PublicCMS v.4.0.202302.e allows an attac…8.8
• CVE-2024-3176Out of bounds write in SwiftShader in Google Chrome prior to…8.8
• CVE-2024-31760An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allow…4.7
• CVE-2024-31771Insecure Permission vulnerability in TotalAV v.6.0.740 allow…7.8
• CVE-2024-31777File Upload vulnerability in openeclass v.3.15 and before al…9.8
• CVE-2024-3178Concrete CMS versions 9 below 9.2.8 and versions below 8.5.1…4.8
• CVE-2024-31783Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 a…6.1
• CVE-2024-31784An issue in Typora v.1.8.10 and before, allows a local attac…6.1
• CVE-2024-3179Concrete CMS version 9 before 9.2.8 and previous versions be…4.8