CVE-2022-46167

CVE-2022-46167 is a high-severity vulnerability affecting Clastix Capsule, a multi-tenancy framework for Kubernetes, prior to version 0.1.3. An authenticated attacker with PATCH capabilities on their own Tenant Namespace can remove the Owner Reference, disabling Capsule's security enforcements like Pod Security annotations and Network Policies. This allows for potential privilege escalation by enabling the deployment of privileged containers. The vulnerability has a CVSS score of 8.8 (High) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While patches are available in version 0.1.3, there are no known workarounds, and there is currently no evidence of active exploitation, public exploit code, or significant community discussion.