CVE-2024-43403

Kanister is a data protection workflow management tool. The kanister has a deployment called default-kanister-operator, which is bound with a ClusterRole called edit via ClusterRoleBinding. The "edit" ClusterRole is one of Kubernetes default-created ClusterRole, and it has the create/patch/udpate verbs of daemonset resources, create verb of serviceaccount/token resources, and impersonate verb of serviceaccounts resources. A malicious user can leverage access the worker node which has this component to make a cluster-level privilege escalation.

• CWE-269

• https://github.com/kanisterio/kanister/blob/master/helm/kanister-operator/templates/rbac.yaml#L49
• https://github.com/kanisterio/kanister/security/advisories/GHSA-h27c-6xm3-mcqp

Published

Aug 20, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-43398REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6…5.9
• CVE-2024-43399Mobile Security Framework (MobSF) is a pen-testing, malware …9.8
• CVE-2024-4340Passing a heavily nested list to sqlparse.parse() leads to a…7.5
• CVE-2024-43400XWiki Platform is a generic wiki platform offering runtime s…5.4
• CVE-2024-43401XWiki Platform is a generic wiki platform offering runtime s…8
• CVE-2024-43402Rust is a programming language. The fix for CVE-2024-24576, …8.8
• CVE-2024-43404MEGABOT is a fully customized Discord bot for learning and f…9.8
• CVE-2024-43405Nuclei is a vulnerability scanner powered by YAML based temp…7.8
• CVE-2024-43406LF Edge eKuiper is a lightweight IoT data analytics and stre…8.8
• CVE-2024-43407CKEditor4 is an open source what-you-see-is-what-you-get HTM…6.1
• CVE-2024-43408Discourse Placeholder Forms will let you build dynamic docum…6.3
• CVE-2024-43409Ghost is a Node.js content management system. Improper authe…6.5