The vulnerability allows an attacker with write access to a container filesystem to place an exec credentials plugin in the host’s /etc/kubernetes/admin.conf file. When kubectl later pulls the cluster kubeconfig, it will run that plugin as the macOS host user, giving the attacker the ability to execute arbitrary commands on the host. This is a pure privilege escalation from container level to full host control, with the potential for data exfiltration, persistence, or further exploitation.

Apple Container is the affected product. The problem is present in versions prior to 1.5.0. Container version 1.5.0 and later have addressed the flaw.

There is no EPSS score listed, and the vulnerability is not in the CISA KEV catalog, but the impact is severe. If an attacker can write into the container filesystem—likely through a compromised pod or through legitimate access—the attack chain is straightforward with no additional network connectivity requirements. Because the flaw hinges on the ability to write to a specific configuration file, it is believed to be exploitable within an untrusted container environment only when the container has privileged or write access to the host’s configuration directories. The CVSS score is not provided, but the nature of the vulnerability suggests high severity.