GO-2026-6538None▾ Sunlitk8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit
github.com/falcosecurity/plugins/plugins/k8saudit < 0.18.0github.com/falcosecurity/plugins/plugins/k8saudit-aks < 0.6.0github.com/falcosecurity/plugins/plugins/k8saudit-eks < 0.12.0github.com/falcosecurity/plugins/plugins/k8saudit-gke < 0.9.0github.com/falcosecurity/plugins/plugins/k8saudit-ovh < 0.6.0Upgrade to a patched release:
github.com/falcosecurity/plugins/plugins/k8saudit 0.18.0github.com/falcosecurity/plugins/plugins/k8saudit-aks 0.6.0github.com/falcosecurity/plugins/plugins/k8saudit-eks 0.12.0github.com/falcosecurity/plugins/plugins/k8saudit-gke 0.9.0github.com/falcosecurity/plugins/plugins/k8saudit-ovh 0.6.0Connected by shared product, vendor, weakness, or advisory.