Two vulnerabilities in Zilliz Attu 2.6.5 chain into something serious. Missing authentication lets anyone proxy requests unauthenticated, and a regex bypass defeats the private IP block. Bishop Fox turned both into full Kubernetes namespace takeover in a cloud deployment.
Zilliz / Attu | 2.6.5
About this summary. This is a short, independently written summary of an article first published by Bishop Fox. Cyber Security News did not report or verify the underlying story. Read the original: https://bishopfox.com/blog/zilliz-attu-2-6-5
Source attribution: headline and facts are from Bishop Fox (bishopfox.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for…
EU Cyber Resilience Act requirements for containers and Kubernetes
Starting in full force on Dec. 10, 2024, the EU Cyber Resilience Act (CRA) is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all…
Beyond source code: A path to the keys to the kingdom
What began as a single compromised identity quickly expanded into an organization’s development and cloud environments.
OperTraitors: How Kubernetes Operators Betray Your Security Posture
We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities.
SUSE Linux security advisory (AV26-968)
Serial Number: AV26-968 Date: September 28, 2026 As of September 28, 2026, SUSE is affected by a vulnerability in the following product: NeuVector Prior to 5.4.11 Prior…
[kubernetes] CVE-2026-19444: kubectl cp path traversal on Windows allows arbitrary file writes
Posted by Vyom Yadav on Sep 28 Hello Kubernetes Community, A security issue was discovered in Kubernetes where a malicious tar binary in a container may be able to write…