Unauthenticated Execution Threatens Kubernetes Clusters

A critical (CVSS 9.8) vulnerability in the Fission router allows unauthenticated attackers to invoke internal/private functions by accessing a public listener that exposes internal routes; upstream patched the issue in v1.23.0 (separating listeners and adding HMAC verification) and the report recommends immediate upgrades or network isolation and path-based filters as temporary mitigations.