Based on the description, the vulnerability was caused by the buildermgr controller processing Package CRDs without verifying that the environment namespace matched the Package namespace. The likely attack vector is internal; an attacker with the ability to create or modify a Package CRD can specify an environment from a different namespace, which results in build-time command execution and the ability to read service account tokens. The impact compromises the confidentiality and integrity of the cluster, potentially enabling an attacker to run arbitrary commands in the build environment and acquire privileged credentials.

All installations of the Fission framework prior to version 1.24.0 are affected. The product Fission (fission:fission) is the vendor/product, and any version earlier than 1.24.0 that processes Package CRDs is vulnerable. Users of older releases should check their version and apply the upgrade.

The CVSS base score is 7.7, indicating high severity, while the EPSS score is not available and it is not currently listed in the CISA KEV catalog. Based on the description, the likely attack vector is internal: exploitation requires the ability to create or edit a Package Custom Resource Definition within Kubernetes and to specify an arbitrary environment namespace; this requires sufficient RBAC permissions. If these permissions exist, an attacker can execute arbitrary build-time commands and exfiltrate service account tokens from the cluster, potentially enabling full cluster compromise.