CVE-2021-41254

CVE-2021-41254 is a critical vulnerability affecting fluxcd kustomize-controller versions prior to 0.15.0, where authenticated users with specific permissions could execute arbitrary commands within the controller container. This allows for privilege escalation to cluster administrator within multi-tenant Kubernetes environments. The vulnerability has a CVSS score of 8.8 (High) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no public exploit intelligence, active exploitation, or significant community discussion surrounding this CVE.