CVE-2026-2270 | Kubernetes up to 1.34.11/1.35.8/1.36.4/1.37.0 StatefulSet Controller privileges management
A vulnerability was found in Kubernetes up to 1.34.11/1.35.8/1.36.4/1.37.0. It has been rated as very critical. The affected element is an unknown function of the component StatefulSet Controller. Performing a manipulation results in improper privilege management.
This vulnerability was named CVE-2026-2270. The attack may be initiated remotely. There is no available exploit.