Patch Now: Kubernetes RCE Flaw Allows Full Takeover of Windows Nodes

The report details CVE-2023-5528, a command-injection vulnerability in Kubernetes' handling of local volumes on Windows nodes that can be exploited by submitting crafted YAML (pods and persistent volumes) to achieve SYSTEM-level remote code execution; discovered by Akamai researcher Tomer Peled with a proof-of-concept, the flaw affects Kubernetes versions earlier than 1.28.4 (including AKS deployments using Windows nodes), has a CVSS of 7.2, and is mitigated by a patch that replaces a cmd exec call with a safe Go symlink operation and by following best practices (patching, RBAC, and provided OPA detection rules).