Understanding unfixed Kubernetes CVEs: What you can and can’t detect

Following updates to four long-standing Kubernetes CVEs, vulnerability scanners may now report these issues in clusters that were previously undetected. Because fixing the underlying code would break core functionality, administrators should instead assess exposure by reviewing cluster permissions and using specific audit log queries to detect suspicious activity.