---
id: 6686
title: "Chaotic Deputy: Critical vulnerabilities in Chaos Mesh lead to Kubernetes cluster takeover"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/chaotic-deputy-critical-vulnerabilities-in-chaos-mesh-lead-to-kubernetes-cluster-takeover/"
published_at: "2025-09-16T13:15:30Z"
tags: ["cloud", "rce", "kubernetes", "jfrog", "vulnerability-disclosure", "cloud-native", "chaos-mesh", "cve-2025-59358", "jfrog-com"]
phying_url: "https://phying.com/item/6686"
lang: en
---

# Chaotic Deputy: Critical vulnerabilities in Chaos Mesh lead to Kubernetes cluster takeover

## Summary

JFrog discloses 'Chaotic Deputy': four Chaos Mesh CVEs, three rated CVSS 9.8, letting in-cluster attackers — even in unprivileged pods — run code on any pod; fixed in 2.7.3.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2025-09-16T13:15:30Z
- **Original:** https://jfrog.com/blog/chaotic-deputy-critical-vulnerabilities-in-chaos-mesh-lead-to-kubernetes-cluster-takeover/
- **Phying News:** https://phying.com/item/6686