arbaaz29/CVE-2022-3294

PoC

Privilege Escalation using nodes/proxy (create action allowed) and nodes/status (update/patch actions allowed)

view exploit source poc_in_githubauthor arbaaz29published 2026-01-14catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-3294US	high8.8OT high	1.62% (76th)	Exploit	2023-03-01
Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests t…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.