CVE-2026-65835

This is a tenant-isolation bypass in Capsule, following an incomplete fix for CVE-2026-22872. The original patch added cluster-scope rejection to the NamespacedItems resource-handling path but missed two parallel paths—RawItems and Generators—that implement the same conceptual operation: allowing Tenant Owners to manage resources within their scope. If you're running Capsule 0.13.x between the two CVEs, your cluster allowed Tenant Owners to create cluster-scoped resources through those unpatched paths. The specific mechanism: RawItems and Generators handlers in the Capsule controller were not gating on IsNamespacedGVK, meaning they would process cluster-scoped resources (like ClusterRole) that should have been rejected. The 0.13.8 patch adds these guards to the missed paths, but the architectural pattern remains scattered conditional checks rather than a unified authorization gate. Future contributors adding new resource-handling mechanisms will face the same trap. For defenders: verify that your Capsule version is 0.13.8 or later. If you're on 0.13.x but can't upgrade immediately, audit your Capsule controller logs for RawItems and Generators operations creating cluster-scoped resources—particularly ClusterRole and ClusterRoleBinding. Note that creating a ClusterRole alone doesn't confer privileges; the attacker还需要 ClusterRoleBinding to actually escalate. In most default configurations, that binding step requires additional preconditions, which explains why the EPSS is low despite the severe conceptual violation of tenant boundaries. The deeper concern: Capsule's controller runs with elevated privileges to manage tenant resources across namespaces. A ClusterRole smuggled through these paths was being created in the controller's privileged context, meaning the controller would subsequently attempt to use it during reconciliation. That's the blast radius a CVSS 6.6 doesn't fully capture—this isn't just one tenant escaping; it's potential contamination of the reconciliation logic that touches all tenants.

Reviewed through automated stages and approved by a human before publication.