The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoResearchPeer-reviewed
${\mathsf{KubeSec}} $KubeSec: Automatic Detection of Takeover Risks Introduced by Third-Party Apps in the Kubernetes Ecosystem
- Published
- Record updated
Summary
KubeSec is a framework that analyzes application permission configurations and component code dependencies to find takeover risks in third-party applications (TPAs) running in Kubernetes clusters. The study found 562 insecure RBAC binding patterns and 375 vulnerabilities linked to 134 CVEs, affecting millions of users, with average remediation exceeding 10 months. The findings were reported to the relevant teams, and the community assigned 21 new CVEs.