admission-control

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Admission handlers in the admission runtime operate on the incoming Kubernetes admission request object (req.Object/OldObject) and only use outsider-authored free text if an attacker can submit arbitrary resource payloads to those create/update admission requests.