As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-97146: Apache YuniKorn: Admission control bypass via system label forgery
Apache YuniKorn versions before 1.10.0 contain a bypass in admission control that allows an attacker with high privileges to set a secondary label on a pod to skip validation checks for the user annotation. By applying the label 'app=yunikorn' to a pod, the content restrictions on user annotations are not enforced.
Why it matters: Kubernetes cluster administrators running YuniKorn before 1.10.0 with high-privilege users should upgrade immediately, as this bypass could allow privilege escalation or policy circumvention through forged system labels.
- Source published
- First seen by Cybersecurity Tracker