CVE-2025-59361: Chaos Controller Manager is vulnerable to OS command injection

Severity: Critical

CVSS Score: 9.8

The cleanIptables mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.