CVE-2026-73266: K8s Controller Trust User Labelcve-2026-73266-k8s-controller-trust-user-label
The controller checks if a label is already present on a user-controlled resource (`$OBJ.Labels`) before applying inherited or mandatory controller labels. An attacker can supply pre-existing labels to bypass controller label assignments and gain unauthorized access or join arbitrary sets.
