Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Capsule Controller runs with cluster-admin privileges. Although the TenantResource RawItems processing logic forcibly sets the namespace, this is ineffective for cluster-scoped resources. Prior to version 0.13.0, tenant administrators can leverage the Controller's elevated privileges to create cluster-scoped resources (such as ClusterRole and ValidatingWebhookConfiguration) that they cannot create directly, achieving cross-tenant privilege escalation and cluster-level attacks. The attack vector has a few limiting factors. This attack requires Tenant Owner privileges and requires Capsule Controller running with cluster-admin privileges (default configuration). Additionally, some clusters may have additional admission controllers blocking malicious resources. Version 0.13.0 patches this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-03 | 1 | Disclosure1 |
| 2026-07-30 | 1 | General1 |
CVE-2026-65835 Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItems and G… https://www.cve.org/CVERecord?id=CVE-2026-65835
Post summary
The statement reports that Capsule's 0.13.0‑0.13.8 releases are affected by CVE‑2026‑65835, but offers no PoC, exploit code, patch info, or evidence of active exploitation.
🔴 Capsule (#Kubernetes Multi-Tenancy Framework), Privilege Escalation via Cluster-Scoped Resource Injection, #CVE-2026-22872 (High Severity) -DC-Jun2026-178 https://dailycve.com/capsule-kubernetes-multi-tenancy-framework-privilege-escalation-via-cluster-scoped-resource-injection-cve-2026-22872-high-severity-dc-jun2026-178/
Post summary
A new privilege escalation flaw in Capsule (Kubernetes Multi‑Tenancy Framework) is disclosed, allowing cluster‑scoped resource injection and rated as high severity (CVE‑2026‑22872).
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | projectcapsule | capsule | - | - | - |