Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-1000056

31
FAUCET Score

CVE-2017-1000056 is a critical privilege escalation vulnerability affecting Kubernetes versions 1.5.0 through 1.5.4. This flaw in the PodSecurityPolicy admission plugin allows an attacker to leverage any existing PodSecurityPolicy object. With a CVSS score of 9.8, it presents a severe risk with high impact on confidentiality, integrity, and availability, requiring no user interaction or complex attack vectors. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
1.5.0CPE matchmatch criteria
cpe:2.3:a:kubernetes:kubernetes:1.5.0:*:*:*:*:*:*:*
1.5.1CPE matchmatch criteria
cpe:2.3:a:kubernetes:kubernetes:1.5.1:*:*:*:*:*:*:*
1.5.2CPE matchmatch criteria
cpe:2.3:a:kubernetes:kubernetes:1.5.2:*:*:*:*:*:*:*
1.5.3CPE matchmatch criteria
cpe:2.3:a:kubernetes:kubernetes:1.5.3:*:*:*:*:*:*:*
1.5.4CPE matchmatch criteria
cpe:2.3:a:kubernetes:kubernetes:1.5.4:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
2.44%
Probability of exploitation in next 30 days
EPSS Percentile
82.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0244 is in the 73rd percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

check_pointpatch availablevia llm_extracted
View patch
chromepatch availablevia llm_extracted
View patch
gopatch availablevia ghsa
Product: k8s.io/kubernetesFixed in: 1.5.5
infiniflowpatch availablevia llm_extracted
View patch
vuepatch availablevia llm_extracted
View patch
github_advisoryworkaround availablevia nvd_reference
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kubernetes

Vendor Advisories (6)

goGHSA-2jx2-76rc-2v7vcritical

Kubernetes Privilege Escalation

May 12, 2021
redhatCVE-2017-1000056Moderate

kubernetes: Privilege escalation in the PodSecurityPolicy admission plugin

Mar 1, 2017
vuellm-vue-13baa16558ca7bbb

PodSecurityPolicy admission plugin authorizes incorrectly

chromellm-chrome-de2a29f77bd21e31

PodSecurityPolicy admission plugin authorizes incorrectly

check_pointllm-check_point-e5ccfb246e74f01d

PodSecurityPolicy admission plugin authorizes incorrectly

infiniflowllm-infiniflow-1b568ccf69233afe

PodSecurityPolicy admission plugin authorizes incorrectly

References

github.com / kubernetes/kubernetes/issues/43459
MitigationThird Party Advisory