CVE-2016-1905: Access Restriction Bypass in Kubernetes
Summary
CVE-2016-1905: Access Restriction Bypass in kubernetes in github.com/kubernetes/kubernetes. Affects github.com/kubernetes/kubernetes versions < 1.2.0-alpha.6. Fixed in 1.2.0-alpha.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Kubernetes is an open-source container orchestration platform developed in Go. It provides a framework for automating deployment, scaling, and management of containerized applications. The vulnerability affects the github.com/kubernetes/kubernetes package.
Vulnerability Detail
The vulnerability allows for an access restriction bypass in Kubernetes. It can be exploited to gain unauthorized access to restricted resources or perform actions that should be restricted. The issue originates from a flaw in the access control mechanism of Kubernetes, which fails to properly enforce restrictions under certain conditions. This could lead to unauthorized privilege escalation, data leakage, or unauthorized modification of resources.
How To Fix
Latest published version: v1.14.10 as of 23 Oct 2026
go get github.com/kubernetes/kubernetes@v1.14.10Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.2.0-alpha.6
This is the first release that contains the fix.
go get github.com/kubernetes/kubernetes@v1.2.0-alpha.6Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can implement additional access control measures outside of Kubernetes to mitigate the risk of unauthorized access. This could involve firewall rules, network segmentation, or other security measures to restrict access to the Kubernetes environment.
Conclusion
The access restriction bypass vulnerability in Kubernetes can lead to unauthorized access and potential security risks. It is crucial to update the affected package to the recommended version and apply any available security patches. Implementing additional access control measures can also help mitigate the risk while the update is being applied.
See every vulnerability recorded for github.com/kubernetes/kubernetes →
FAQ
Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications.
The vulnerability allows for an access restriction bypass, potentially leading to unauthorized access, privilege escalation, data leakage, or unauthorized modification of resources.
To fix the vulnerability, update the affected package to version 1.2.0-alpha.6 or later. It is also recommended to update to the latest stable release for additional security patches and improvements.
As a temporary workaround, implement additional access control measures outside of Kubernetes, such as firewall rules or network segmentation, to restrict access to the Kubernetes environment.
You can find more information about this vulnerability in the official vulnerability report at https://pkg.go.dev/vuln/GO-2022-0893.
Related vulnerabilities
Recent vulnerabilities recorded for github.com/kubernetes/kubernetes.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
