CVE-2022-23652

CVE-2022-23652 is a high-severity authentication bypass vulnerability affecting clastix capsule-proxy versions prior to 0.2.1, a reverse proxy for Kubernetes multi-tenancy. An authenticated attacker can exploit a malicious 'Connection' header to achieve privilege escalation, potentially gaining 'cluster-admin' access to the Kubernetes API Server. With a CVSS score of 8.8, this vulnerability is easily exploitable over the network with low complexity and no user interaction, leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, and no known workarounds exist.