CVE-2023-33190

Summary

CVE-2023-33190 is a significant vulnerability affecting Sealos, an open-source cloud operating system distribution based on Kubernetes. In Sealos versions prior to 4.2.1-rc4, an improper configuration of Role Based Access Control (RBAC) permissions has been identified. This flaw grants attackers unauthorized cluster control permissions, enabling them to manage the entire Sealos-deployed cluster, along with hundreds of associated pods and resources. The vulnerability has been addressed in version 4.2.1-rc4, and users are strongly advised to upgrade as soon as possible. There are currently no known workarounds for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.