GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.6M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2025-10725: Kubernetes Clusterrolebinding System Authenticatedcve-2025-10725-kubernetes-clusterrolebinding-system-authenticated

ClusterRoleBinding (or RoleBinding) grants permissions to the built-in group "system:authenticated" (or "system:unauthenticated"). This binds the referenced role to every authenticated principal in the cluster, effectively making the role's permissions universal. This pattern caused CVE-2025-10725 (opendatahub-operator) by binding a Job/Workload-create role

YAMLCVE-2025-10725CWE-269CWE-732
by Provallyupdated 2026-06-12Apache-2.0
1.4K0 direct1.4K via packs
79
All matching rules loaded.