CyberRota Analysis
AI-GeneratedThe Kubernetes Logging Operator prior to version 6.6.0 is vulnerable due to a flaw in the Fluentd configuration renderer, which allows unescaped user input to be written directly into the configuration file. This can enable an attacker with the ability to create Flow resources to inject malicious commands, potentially executing arbitrary code within the Fluentd aggregator. Organizations using affected versions should prioritize upgrading to version 6.6.0 to mitigate this critical security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow record_transformer.records values directly into fluent.conf without escaping, allowing a user who can create Flow resources to inject a Fluentd <match **> block using @type exec and execute arbitrary commands inside the Fluentd aggregator. This issue is fixed in version 6.6.0.