Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 20, 2026 · NIST NVD

   Detected

   Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. In versions prior to 0.6.5, due to a miswritten NetworkPolicy, a malicious actor can pivot from an instance to any Pod out of the origin namespace. This breaks the security-by-default property expected as part of the deployment program, leading to a potential lateral movement. In the specific case of sdk/ku

2. Jun 17, 2026 · NIST NVD

   Updated

   Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. In versions prior to 0.6.5, due to a miswritten NetworkPolicy, a malicious actor can pivot from an instance to any Pod out of the origin namespace. This breaks the security-by-default property expected as part of the deployment program, leading to a potential lateral movement. In the specific case of sdk/ku

Affected

• cpe ctfer-io/chall-managerversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-32768

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-32768

  Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. In versions prior to 0.6.5, due to a miswritten NetworkPolicy, a malicious actor can pivot from an instance to any Pod out of the origin namespace. This breaks the security-by-default prop

  nvd.nist.gov

References

• Patch · github.com
• Release Notes · github.com
• Mitigation · github.com