Understanding the Radius Controller Vulnerability: Preventing Cross-Tenant Resource Deletion
A configuration-validation issue in the Radius Kubernetes controller can cause it to delete a container resource via an injected Deployment annotation. This vulnerability, known as the 'Confused Deputy' pattern, can have significant impacts in multi-tenant installations.