CVE-2022-2385: Kubernetes Aws-Iam-Authenticator

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.

Affected products

• Kubernetes Aws-Iam-Authenticator: from 0.5.2, before 0.5.9 (fixed in 0.5.9)

Published 2022-07-12. Last modified 2026-06-17.