CVE-2026-47250: Unsafe Kubernetes Context Mutation

Dynamically modifying the Kubernetes configuration context via `setCurrentContext` on an existing client object creates a critical race condition in concurrent environments (Context Confusion). During concurrent execution, commands designated for one cluster might inadvertently execute on whichever cluster context was set last globally. Pass per-execution co

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-47250-unsafe-kubernetes-context-mutation --engine opengrep

Description

Dynamically modifying the Kubernetes configuration context via `setCurrentContext` on an existing client object creates a critical race condition in concurrent environments (Context Confusion). During concurrent execution, commands designated for one cluster might inadvertently execute on whichever cluster context was set last globally. Pass per-execution co