VULNERABILITY INTELLIGENCE

CVE-2025-59361

CVSS score9.8 CRITICAL

EPSS probability0.81%

CISA KEVNot currently listed

Published2025-09-15

Last modified2026-06-17

Description

The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service.