Go/github.com/projectcapsule/capsule CVE-2025-55205: critical 9, EPSS 0.46%

Capsule tenant owners with "patch namespace" permission can hijack system namespaces label

Action: Upgrade github.com/projectcapsule/capsule to 0.10.4 or later.

go get github.com/projectcapsule/capsule@v0.10.4

Affected

Fixed versions

Sources

• osv: GHSA-fcpm-6mxq-m5vv
• https://github.com/projectcapsule/capsule/security/advisories/GHSA-fcpm-6mxq-m5vv
• https://nvd.nist.gov/vuln/detail/CVE-2025-55205
• https://github.com/projectcapsule/capsule/commit/e1f47feade6e1695b2204407607d07c3b3994f6e
• https://github.com/projectcapsule/capsule
• https://pkg.go.dev/vuln/GO-2025-3893

CVE-2025-55205 · published 2025-08-18T21:00:36Z · modified 2025-08-29T20:35:24Z · JSON