CVE-2026-110720

Summary

A cross-namespace authorization bypass in consul-k8s ACL binding rules allows authenticated low-privilege users to obtain elevated Consul privileges by escaping namespace restrictions.

Exploitability

Exploitation requires valid Consul credentials (PR:L) and no user interaction; the flaw is trivially exploitable once the attacker has access to a vulnerable consul-k8s deployment.

Blast radius

Successful exploitation grants attackers elevated privileges in Consul, enabling full compromise of confidentiality, integrity, and availability across namespaces and potentially the entire service mesh.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade consul-k8s to version 2.1.0 or 1.8.18 (or later patch releases).

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.