High severity7.5GHSA Advisory· Published May 3, 2024· Updated Apr 15, 2026
CVE-2024-33398
CVE-2024-33398
Description
There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/piraeusdatastore/piraeus-operator/v2Go | <= 2.5.0 | — |
Affected products
2- Range: <= 2.5.0
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-6fg2-hvj9-832fghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-33398ghsaADVISORY
- gist.github.com/HouqiyuA/d0c11fae5ba4789946ae33175d0f9edbnvdWEB
- piraeus.ioghsaWEB
- piraeus.ionvd
News mentions
0No linked articles in our index yet.