Auth bypass in 3scale-Sre Marin3r
CVE-2025-64171
MARIN3R is a lightweight, CRD based envoy control plane for kubernetes. In versions 0.13.3 and below, there is a cross-namespace secret access vulnerability in the project's DiscoveryServiceCertificate which allows users to bypass RBAC and access secrets in unauthorized namespaces. This issue is fixed in version 0.13.4.
Vulnerability class: Broken Access Control
EPSS: 0.002 (9.8th percentile) — read the EPSS interpretation.
Affected products
- 3scale-sre Marin3r — versions < 0.13.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)