Rob Scott

**Name of the Vulnerable Software and Affected Versions** Kubernetes (affected versions not specified) **Description** A security issue exists in Kubernetes that could allow users to send network traffic to locations they would not normally have access to. This is due to a confused deputy attack. The issue involves permissions related to `Endpoint` and `EndpointSlice` resources, potentially enabling cross-Namespace forwarding. A confused deputy attack occurs when a program with certain privileges is tricked into performing actions on behalf of another program, potentially granting unauthorized access or causing unintended consequences. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.