Kubernetes patches Windows kubelet NTLM coercion via subPath
CVE-2026-76654 lets a crafted symlink on Windows nodes push the kubelet into authenticating to an attacker share and leaking its NetNTLMv2 hash.
Kubernetes has fixed a medium-severity flaw in the Windows kubelet that can force NTLM authentication to an attacker-controlled network share.
CVE-2026-76654 arises when a pod volume mount uses a subPath that is a symbolic link resolving to a UNC path. The kubelet did not reject that target, so it would attempt to reach the share and authenticate with NTLM. An attacker who can arrange that layout can capture the NetNTLMv2 hash of the account the kubelet runs as, then try to crack the password or relay the hash to impersonate a domain-joined node.
The issue is scored 5.8 (CVSS 3.1) and affects kubelet through 1.34.11, 1.35.8, 1.36.4, and 1.37.0. Fixed builds are 1.34.12, 1.35.9, 1.36.5, and 1.37.1 and later; those releases refuse UNC symlink targets on Windows. Operators should upgrade the kubelet on Windows nodes. Evidence of exploitation should go to the Kubernetes security team.
The flaw was reported through the Kubernetes third-party security audit work with OSTIF and Shielder. Nathan Herz announced the advisory for the Security Response Committee.