CVE-2026-32193

Name of the Vulnerable Software and Affected Versions Microsoft Azure Kubernetes Service (affected versions not specified)

Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute code locally. This issue can be exploited by an untrusted pod with hostNetwork enabled to break out to the worker node, potentially leading to node root access and further privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.