{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-76654", "assignerOrgId": "a6081bf6-c852-4425-ad4f-a67919267565", "state": "PUBLISHED", "assignerShortName": "kubernetes", "dateReserved": "2026-08-19T15:51:12.670Z", "datePublished": "2026-10-26T22:29:23.944Z", "dateUpdated": "2026-10-26T23:10:47.018Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a6081bf6-c852-4425-ad4f-a67919267565", "shortName": "kubernetes", "dateUpdated": "2026-10-26T22:29:23.944Z"}, "title": "Subpath symlinking on Windows nodes permits NTLM coercion", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-59", "description": "CWE-59 Improper Link Resolution Before File Access ('Link Following')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-132", "descriptions": [{"lang": "en", "value": "CAPEC-132 Symlink Attack"}]}], "affected": [{"vendor": "Kubernetes", "product": "Kubernetes", "versions": [{"status": "affected", "version": "v1.34.0", "lessThanOrEqual": "v1.34.11", "versionType": "custom"}, {"status": "affected", "version": "v1.35.0", "lessThanOrEqual": "v1.35.8", "versionType": "custom"}, {"status": "affected", "version": "v1.36.0", "lessThanOrEqual": "v1.36.4", "versionType": "custom"}, {"status": "affected", "version": "v1.37.0", "lessThanOrEqual": "v1.37.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves to a UNC path. As a result, the kubelet will transparently attempt to authenticate to the share using NTLM. This allows an attacker to obtain the NetNTLMv2 hash of the account under which the kubelet is running. An attacker could then attempt to crack the hash to retrieve the corresponding password or relay it to impersonate the node, if the node is domain-joined.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves to a UNC path. As a result, the kubelet will transparently attempt to authenticate to the share using NTLM.<br><br>This allows an attacker to obtain the NetNTLMv2 hash of the account under which the kubelet is running. An attacker could then attempt to crack the hash to retrieve the corresponding password or relay it to impersonate the node, if the node is domain-joined."}]}], "references": [{"url": "https://github.com/kubernetes/kubernetes/issues/142098", "tags": ["issue-tracking"]}, {"url": "https://groups.google.com/g/kubernetes-security-announce/c/Wkv04IFzW8g", "tags": ["mailing-list"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.8, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "To mitigate this vulnerability, upgrade Kubernetes: https://kubernetes.io/docs/tasks/administer-cluster/cluster-upgrade/", "supportingMedia": [{"type": "text/html", "base64": false, "value": "To mitigate this vulnerability, upgrade Kubernetes: <a target=\"_blank\" rel=\"nofollow\" href=\"https://kubernetes.io/docs/tasks/administer-cluster/cluster-upgrade/\">https://kubernetes.io/docs/tasks/administer-cluster/cluster-upgrade/</a><br>"}]}], "credits": [{"lang": "en", "value": "Kubernetes Third-Party Security Audit subproject, OSTIF, and Shielder", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/09/23/36"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-10-26T23:10:47.018Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Kubernetes", "vendor": "Kubernetes", "versions": [{"lessThanOrEqual": "v1.34.11", "status": "affected", "version": "v1.34.0", "versionType": "custom"}, {"lessThanOrEqual": "v1.35.8", "status": "affected", "version": "v1.35.0", "versionType": "custom"}, {"lessThanOrEqual": "v1.36.4", "status": "affected", "version": "v1.36.0", "versionType": "custom"}, {"lessThanOrEqual": "v1.37.0", "status": "affected", "version": "v1.37.0", "versionType": "custom"}]}], "source": "jordan@liggitt.net"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves to a UNC path. As a result, the kubelet will transparently attempt to authenticate to the share using NTLM. This allows an attacker to obtain the NetNTLMv2 hash of the account under which the kubelet is running. An attacker could then attempt to crack the hash to retrieve the corresponding password or relay it to impersonate the node, if the node is domain-joined."}], "id": "CVE-2026-76654", "lastModified": "2026-10-27T00:17:34.407", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 4.0, "source": "jordan@liggitt.net", "type": "Secondary"}]}, "published": "2026-10-26T23:17:09.750", "references": [{"source": "jordan@liggitt.net", "url": "https://github.com/kubernetes/kubernetes/issues/142098"}, {"source": "jordan@liggitt.net", "url": "https://groups.google.com/g/kubernetes-security-announce/c/Wkv04IFzW8g"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/09/23/36"}], "sourceIdentifier": "jordan@liggitt.net", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-59"}], "source": "jordan@liggitt.net", "type": "Secondary"}]}

{"bugzilla": {"description": "kubelet: kubelet: Subpath symlinking on Windows nodes permits NTLM coercion", "id": "2526745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526745"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-59", "details": ["A flaw was found in Kubernetes kubelet on Windows nodes. When kubelet resolves a volume subPath that is a symbolic link, it does not reject an ordinary UNC network path. Following that link causes Windows to authenticate to the remote share with NTLM, exposing the NetNTLMv2 hash of the kubelet account. That hash may be cracked or, if the node is domain-joined, used in an NTLM relay."], "mitigation": {"lang": "en:us", "value": "Clusters with no Windows nodes need no change. \nThese steps reduce exposure:\n- Limit who can create pods that schedule onto Windows nodes.\n- Prevent Windows nodes from opening SMB/UNC connections to untrusted networks."}, "name": "CVE-2026-76654", "package_state": [{"cpe": "cpe:/a:redhat:windows_machine_config", "fix_state": "Fix deferred", "package_name": "openshift4-wincw/windows-machine-config-operator-bundle", "product_name": "Red Hat OpenShift for Windows Containers"}, {"cpe": "cpe:/a:redhat:windows_machine_config", "fix_state": "Fix deferred", "package_name": "openshift4-wincw/windows-machine-config-rhel9-operator", "product_name": "Red Hat OpenShift for Windows Containers"}], "public_date": "2026-09-15T16:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-76654\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-76654\nhttps://github.com/openshift/kubernetes/pull/2793"], "statement": "Only Windows workers are in scope. WMCO is what ships and installs kubelet.exe on those nodes. The Linux kubelet used on control plane and RHCOS workers does not include the vulnerable Windows path.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "kubelet", "vendor": "kubernetes"}], "created": "2026-09-25T18:00:20.827146+00:00", "updated": "2026-10-27T08:00:17.749497+00:00", "vendors": ["kubernetes", "kubernetes$PRODUCT$kubelet"]}