The vulnerability allows an attacker with write access to a container filesystem to place an exec credentials plugin in the host’s /etc/kubernetes/admin.conf file. When kubectl later pulls the cluster kubeconfig, it will run that plugin as the macOS host user, giving the attacker the ability to execute arbitrary commands on the host. This is a pure privilege escalation from container level to full host control, with the potential for data exfiltration, persistence, or further exploitation.

Apple Container is the affected product. The problem is present in versions prior to 1.5.0. Container version 1.5.0 and later have addressed the flaw.

The CVSS score of 7.8 indicates high severity. The EPSS score is below 1%, indicating a low but nonzero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. An attacker who can write to a container filesystem can plant an exec credentials plugin in the host’s /etc/kubernetes/admin.conf, causing kubectl to execute it as the macOS host user the next time the kubeconfig is pulled. This allows arbitrary command execution on the host. The attack chain requires write access inside the container and the presence of the write-config or create function; no additional network connectivity is required.