Loading vulnerability…
OS Command Injection in Chaos Mesh killProcesses
CVE-2025-59360 is an OS command injection vulnerability in the killProcesses GraphQL mutation of the Chaos Mesh Controller Manager, affecting versions earlier than 2.7.3. The mutation concatenates attacker-controlled process identifiers into a shell command without adequate sanitization and passes it to ExecBypass for execution through Chaos Daemon. Crafted identifiers containing shell metacharacters can therefore execute arbitrary operating system commands. Combined with the missing authentication vulnerability CVE-2025-59358, the flaw permits unauthenticated attackers with cluster network access to achieve remote code execution across nodes managed by Chaos Mesh. It is one of the vulnerabilities collectively named Chaotic Deputy.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can compromise workloads and nodes managed by Chaos Mesh, whose Chaos Daemon runs as a privileged DaemonSet by default. Arbitrary command execution can enable sensitive data and Kubernetes service account token theft, lateral movement, persistence, and service disruption. Stolen credentials and the platform's privileged access can potentially enable complete Kubernetes cluster takeover; the ultimate scope depends on deployment privileges and accessible service accounts.
If you can’t patch tonight, do this now.
If upgrading is not immediately possible, redeploy the Chaos Mesh Helm chart with enableCtrlServer=false to disable the vulnerable controller server. Restricting network access to the Controller Manager's GraphQL service to trusted workloads can further reduce exposure.
Patch, then assume compromise.
Upgrade Chaos Mesh to version 2.7.3 or a later fixed release.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.