Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
82
Disclosed reports
77
Subdomains
662
Vendor on CyberSIXT
Kubernetes (120 CVEs, 0 exploited)

Most upvoted reports77

All reports
Most upvoted reports of Kubernetes
ReportWeaknessDisclosedBountyVotes
Node disk DOS by writing to container /etc/hostsAnalysed#867699Denial of Service2020-07-22$1,000161
Injection in path parameter of Ingress-nginxAnalysed#2701701Command and Code Injection2026-03-07–91
elections.k8s.io uses weak session secret key, may place elections at riskAnalysed#1387366Cryptography2025-09-19$25086
Bypass validation parts in AWS IAM Authenticator for KubernetesAnalysed#1580493Authentication2023-05-25$2,50068
CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodesAnalysed#2231019Command and Code Injection2023-12-21$5,00067
Subdomain Takeover Via via Dangling NS records on Amazon Route 53 http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.ioAnalysed#746000Authentication2020-11-29$25062
Ingress nginx annotation injection causes arbitrary command executionAnalysed#1728174Command and Code Injection2023-11-24$2,50057
Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespacesAnalysed#1249583Access Control2021-12-04–55
Privilege Escalation in kOps using GCE/GCP ProviderAnalysed#1842829Access Control2023-08-04$2,50052
SSRF vulnerability can be exploited when a hijacked aggregated api server such as metrics-server returns 30XAnalysed#1544133Server-Side Request Forgery2022-12-10$1,00051

Subdomains662

Subdomains of Kubernetes
NameScopeFirst seen
demo.gcr.iotestNot in the scope2026-11-14
test.gcr.iotestNot in the scope2026-11-14
cim-qa.gcr.iotestNot in the scope2026-11-14
cim-uat.gcr.iotestNot in the scope2026-11-14
cim-api-qa.gcr.ioapi, testNot in the scope2026-11-14
cim-api-uat.gcr.ioapi, testNot in the scope2026-11-14
cim-service-qa.gcr.iotestNot in the scope2026-11-14
cim-service-uat.gcr.iotestNot in the scope2026-11-14
ci-test.k8s.ioci, testNot in the scope2026-11-14
pr-test.k8s.iotestNot in the scope2026-11-14
perf-dash.k8s.iotestNot in the scope2026-11-14
thockin-test1.k8s.iotestNot in the scope2026-11-14
thockin-test2.k8s.iotestNot in the scope2026-11-14
thockin-test3.k8s.iotestNot in the scope2026-11-14
node-perf-dash.k8s.iotestNot in the scope2026-11-14
perf-dash-canary.k8s.iostaging, testNot in the scope2026-11-14
registry-sandbox.k8s.iotest, toolsNot in the scope2026-11-14
artifacts-sandbox.k8s.iotestNot in the scope2026-11-14
agent-sandbox.sigs.k8s.iotestNot in the scope2026-11-14
node-perf-dash-staging.k8s.iostaging, testNot in the scope2026-11-14
k8s-infra-cdn-cf-sandbox-ame.k8s.iotest, toolsNot in the scope2026-11-14
api.e2e-0b558396e7-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-0e3b3b105e-51e6f.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-119d4bce7f-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-2a1210d242-167d8.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-2f38f331a5-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-335a350845-82393.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-3b069ed03f-3bdeb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-4386ba2b8b-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-48c3e7466b-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-52299a2419-167d8.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-6443a68b84-51e6f.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-752a644b67-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-7530df1184-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-78945a0dd8-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-78e37db369-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-8626c578fa-167d8.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-87a41f769c-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-903bce6b17-82393.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-9204b62fe8-82393.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-9b4c150ca1-3bdeb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-a1bee8b4b9-51e6f.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-a4cf1bad8d-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-a8ded46cc5-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-bcd6bf0425-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-c040dd4db7-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-c2b9a690a3-167d8.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-d0e1908200-82393.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-d2776fe574-82393.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-dda82cbc91-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-de41e3ce3a-51e6f.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-e0626a3170-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-e253554a42-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-f3f156c7a5-51e6f.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
api.e2e-ffa700880e-ff1eb.test-cncf-aws.k8s.ioapi, testNot in the scope2026-11-14
fr-kusanagiommunityaime-demo-kubectl.docs.k8s.iotestNot in the scope2026-11-14
api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.ioapi, staging, testNot in the scope2026-11-14
nodes-sfo3.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotestNot in the scope2026-11-14
api.internal.e2e-kops-aws-canary.test-cncf-aws.k8s.ioapi, internal, staging, testNot in the scope2026-11-14
api.internal.scale-1000.periodic.test-cncf-aws.k8s.ioapi, internal, testNot in the scope2026-11-14
api.internal.scale-5000.periodic.test-cncf-aws.k8s.ioapi, internal, testNot in the scope2026-11-14
virus0316ts-shanemancommunityaime-demo-kubectl.docs.k8s.iotestNot in the scope2026-11-14
delegateapi.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.iostaging, testNot in the scope2026-11-14
master-nyc1-3.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotestNot in the scope2026-11-14
antivirus1overi.fr-kusanagiommunityaime-demo-kubectl.docs.k8s.iotestNot in the scope2026-11-14
control-plane-sfo3-2.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotestNot in the scope2026-11-14
control-plane-sfo3-3.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotestNot in the scope2026-11-14
control-plane-sgp1-1.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotestNot in the scope2026-11-14
control-plane-sgp1-2.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotestNot in the scope2026-11-14
ci-test.kubernetes.ioci, testNot in the scope2026-11-14
pr-test.kubernetes.iotestNot in the scope2026-11-14
ux-test.docs.kubernetes.iotestNot in the scope2026-11-14
www.ux-test.docs.kubernetes.iotestNot in the scope2026-11-14

2 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.