CVE-2025-59360 – OS command injection in Chaos Mesh via the killProcesses mutation

CVE ID : CVE-2025-59360

Published : Sept. 15, 2025, 12:15 p.m. | 37 minutes ago

Description : The killProcesses mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…