References https://jfrog.com/blog/chaotic-deputy-critical-vulnerabilities-in-chaos-mesh-lead-to-kubernetes-cluster-takeover/ https://www.knowsafe.com/ti/info/0/1000786 https://nvd.nist.gov/vuln/detail/CVE-2025-59360 https://github.com/advisories/GHSA-xv9f-728h-9jgv https://thehackernews.com/2025/09/chaos-mesh-critical-graphql-flaws.html https://www.ithome.com.tw/news/171238 https://www.ichioo.net/net/166.html https://github.com/chaos-mesh/chaos-mesh/pull/4702
Related VulnerabilitiesChaos Mesh cleanIptables 未授权 命令注入漏洞Chaos Mesh 访问控制不当漏洞Chaos Mesh 未授权 命令注入漏洞(CVE-2025-8791)LitmusChaos Litmus role参数不恰当授权漏洞(CVE-2025-8792)LitmusChaos Litmus服务端安全控制绕过漏洞(CVE-2025-8794)LitmusChaos Litmus授权绕过漏洞(CVE-2025-8793)LitmusChaos Litmus项目ID参数不当控制漏洞PoCCVE-2023-47105: Chaosblade < 1.7.4 - Remote Code ExecutionPoCCVE-2024-31839: CHAOS 5.0.1 'sendCommandHandler' - Cross-Site ScriptingChaos RAT 远程代码执行漏洞