—
GO-2026-6538
k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit
Quick fix
GO-2026-6538 — github.com/falcosecurity/plugins/plugins/k8saudit: upgrade to the fixed version with the command below.
go get github.com/falcosecurity/plugins/plugins/k8saudit@v0.18.0Details
k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/falcosecurity/plugins/plugins/k8saudit
Introduced in:
0Fixed in: 0.18.0Fix
go get github.com/falcosecurity/plugins/plugins/k8saudit@v0.18.0Go/github.com/falcosecurity/plugins/plugins/k8saudit-aks
Introduced in:
0Fixed in: 0.6.0Fix
go get github.com/falcosecurity/plugins/plugins/k8saudit-aks@v0.6.0Go/github.com/falcosecurity/plugins/plugins/k8saudit-eks
Introduced in:
0Fixed in: 0.12.0Fix
go get github.com/falcosecurity/plugins/plugins/k8saudit-eks@v0.12.0Go/github.com/falcosecurity/plugins/plugins/k8saudit-gke
Introduced in:
0Fixed in: 0.9.0Fix
go get github.com/falcosecurity/plugins/plugins/k8saudit-gke@v0.9.0Go/github.com/falcosecurity/plugins/plugins/k8saudit-ovh
Introduced in:
0Fixed in: 0.6.0Fix
go get github.com/falcosecurity/plugins/plugins/k8saudit-ovh@v0.6.0References
- https://github.com/falcosecurity/plugins/security/advisories/GHSA-jhjp-4c2q-xmx4[ADVISORY]
- https://github.com/falcosecurity/plugins/commit/0adb9b3c7e2c8bad53f30d01c057e038b2afa5e1[WEB]
- https://github.com/falcosecurity/plugins/pull/1400[WEB]
- https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-aks/v0.6.0[WEB]
- https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-eks/v0.12.0[WEB]
- https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-gke/v0.9.0[WEB]
- https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit-ovh/v0.6.0[WEB]
- https://github.com/falcosecurity/plugins/releases/tag/plugins/k8saudit/v0.18.0[WEB]