References https://cve.imfht.com/detail/CVE-2025-59361 https://www.chnhonker.com/4579.html https://aiot.csdn.net/69df647054b52172bc6a17cf.html https://www.ichioo.net/net/166.html https://www.knowsafe.com/ti/info/0/1000788 https://nvd.nist.gov/vuln/detail/CVE-2025-59361 https://jfrog.com/blog/chaotic-deputy-critical-vulnerabilities-in-chaos-mesh-lead-to-kubernetes-cluster-takeover/ https://github.com/advisories/GHSA-2gcv-3qpf-c5qr https://thehackernews.com/2025/09/chaos-mesh-critical-graphql-flaws.html https://gbhackers.com/chaos-mesh-critical-vulnerabilities/ https://cybersecuritynews.com/chaos-mesh-vulnerabilities/
Related VulnerabilitiesChaos Mesh killProcesses 未授权 命令注入漏洞Chaos Mesh 访问控制不当漏洞Chaos Mesh 未授权 命令注入漏洞(CVE-2025-8791)LitmusChaos Litmus role参数不恰当授权漏洞(CVE-2025-8792)LitmusChaos Litmus服务端安全控制绕过漏洞(CVE-2025-8794)LitmusChaos Litmus授权绕过漏洞(CVE-2025-8793)LitmusChaos Litmus项目ID参数不当控制漏洞PoCCVE-2023-47105: Chaosblade < 1.7.4 - Remote Code ExecutionPoCCVE-2024-31839: CHAOS 5.0.1 'sendCommandHandler' - Cross-Site ScriptingChaos RAT 远程代码执行漏洞