CyberRota Analysis
AI-GeneratedA critical vulnerability exists in submariner's cert-auth mode, where connection configurations are constructed from unvalidated free-form strings in the Custom Resource Definition (CRD). This flaw allows a malicious cluster to inject arbitrary parameters or execute commands via leftupdown hooks, potentially leading to remote code execution with root privileges on the gateway node. Organizations utilizing submariner should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node.