Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
From Enhanced Tax Stamps to AI Enabled Illicit Trade Intelligence syst...
/C O R R E C T I O N — Pismo/
Globe Teleservices Signs A2P Firewall Partnership with Cellcard Cambod...
Yiren Digital Launches Next-Gen Magicube Agent Platform Targeting $30 ...
August CVE with severity of 9.8 vulnerability amplified by ransomware ...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Psst… know anyone interested in selling his/her identity?

      Psst… know anyone interested in selling his/her identity?

      Tuesday, October 7, 2025, 10:30 AM Asia/Singapore | Features
    • Featured

      When failure is not an option

      When failure is not an option

      Monday, October 6, 2025, 3:02 PM Asia/Singapore | Features, Newsletter
    • Featured

      Fragmented data, fractured trust

      Fragmented data, fractured trust

      Tuesday, September 30, 2025, 3:09 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

News

Four CVSS 9.8 vulnerabilities in failure simulation tool expose Kubernetes clusters to takeover

By CybersecAsia editors | Thursday, September 18, 2025, 4:23 PM Asia/Singapore

Four CVSS 9.8 vulnerabilities in failure simulation tool expose Kubernetes clusters to takeover

The very tool meant to strengthen reliability and robustness of cloud-native environments ironically becomes a critical weakness and an attack vector.

A set of critical vulnerabilities in Chaos Mesh, a popular open-source chaos engineering tool for Kubernetes, could allow attackers with limited access inside a cluster to gain complete control of workloads and steal sensitive data.

The flaws, which have now received assigned CVE identifiers, affect the platform’s controller manager component and its default configuration.

The newly disclosed flaws turn the chaos engineering tool into a potential attack vector, exposing organizations to denial-of-service and lateral movement risks. Attackers require network access within the cluster to exploit the issue, but that condition is relatively common in compromised environments.

The vulnerabilities are:

  • CVE-2025-59358 (CVSS 9.8): A missing authentication flaw in the controller’s GraphQL debug server. It allows unauthenticated users in the cluster to issue GraphQL queries that can shut down pods, including critical system pods such as the Kubernetes API server, resulting in cluster-wide denial of service.
  • CVE-2025-59359, CVE-2025-59360, CVE-2025-59361 (all CVSS 9.8): Multiple command injection flaws in GraphQL mutations including cleanTcs, killProcesses, and cleanIptables. In each case, unvalidated user input was concatenated into shell commands, permitting arbitrary command execution within targeted pods.

Because Chaos Mesh includes a privileged daemon for interacting with cluster workloads, exploitation of these flaws enables more than localized pod disruption. An attacker could execute commands through the daemon on any pod in the cluster. Demonstrated attack paths include extracting Kubernetes service account tokens from other pods by copying them through the daemon’s access to host namespaces, thereby escalating privileges and taking over the cluster.

Checking for the vulnerabilities
Administrators can check whether deployments are vulnerable, by verifying running versions below 2.7.3 and identifying whether the controller manager is listening on port 10082. Workarounds include disabling the control server through Helm flags, but the recommended course is to upgrade to the patched release.

The issues highlight the risks of deploying testing and fault injection tools in production without proper hardening. By design, chaos engineering utilities must reach deeply into workloads and infrastructure, which expands their attack surface if access controls or input sanitization are lacking.

According to Shachar Menashe, VP (Security Research), JFROG Security Research, the firm that discovered and disclosed the vulnerabilities earlier this year: “We recommend that Chaos Mesh users upgrade swiftly since these vulnerabilities are extremely easy to exploit and lead to total cluster takeover.”

Share:

PreviousThe future of video security: Poll finds surge in large-scale AI deployment
NextFrench luxury conglomerate announces massive April 2025 multi-brand data breach

Related Posts

How to build a strong risk-aware culture in the front line

How to build a strong risk-aware culture in the front line

Wednesday, February 16, 2022

Making informed cybersecurity decisions and investments through purple teaming

Making informed cybersecurity decisions and investments through purple teaming

Wednesday, December 23, 2020

ChatGPT, what have you done for defenders lately?

ChatGPT, what have you done for defenders lately?

Monday, March 20, 2023

DevSecOps: What enterprises may be missing out

DevSecOps: What enterprises may be missing out

Monday, March 2, 2020

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • HOSTWAY gains 73% operational efficiency for private cloud operations  

    HOSTWAY gains 73% operational efficiency for private cloud operations  

    With NetApp storage solutions, the Korean managed cloud service provider offers a lean, intelligent architecture, …Read more
  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more
  • PT Kereta Api Indonesia announces nationwide email and communication overhaul

    PT Kereta Api Indonesia announces nationwide email and communication overhaul

    The state railway operator’s upgraded email system improves privacy, operational reliability, and regulatory alignment for …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.