CVE-2024-32359

MediumCVSS 6.9

Published: 02/05/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Summary

An RBAC authorization risk in Carina v0.13.0 and earlier allows local attackers to execute arbitrary code via crafted commands, enabling them to obtain the entire cluster's secrets and take over the cluster.

Risk Assessment

The organization risks complete cluster compromise, exposure of sensitive secrets, and potential service disruption.

Recommendation

Immediately upgrade Carina to a version later than 0.13.0 and review RBAC configuration for excessive privileges.

Original NVD description (English source)

An RBAC authorization risk in Carina v0.13.0 and earlier allows local attackers to execute arbitrary code through designed commands to obtain the secrets of the entire cluster and further take over the cluster.