Cloud

Namespace escape in a popular multi-tenancy operator undermines hard isolation claims

A permissive admission webhook let tenant workloads schedule pods into neighbouring namespaces.

Helena Vasquez

Platform Engineering Reporter • 25 Jul 2026 • 6 min read

Abstract cloud computing concept with interconnected nodes — Soft multi-tenancy remains difficult to guarantee. Photo: Unsplash

Platform teams that relied on the operator for tenant separation are being told to assume cross-tenant access was possible. This story is developing and will be updated as our newsroom confirms further detail with affected organisations and responders.

#Kubernetes
#Multi-tenancy
#Isolation

Namespace escape in a popular multi-tenancy operator undermines hard isolation claims

Misconfigured object storage exposed 2.3 million broker settlement records for nine weeks

Confidential computing finally goes mainstream for regulated workloads

Shared cache layer leaked short-lived secrets between serverless tenants

Namespace escape in a popular multi-tenancy operator undermines hard isolation claims

Related Stories

Misconfigured object storage exposed 2.3 million broker settlement records for nine weeks

Confidential computing finally goes mainstream for regulated workloads

Shared cache layer leaked short-lived secrets between serverless tenants