Consul-k8s CVE-2026-110720: CVSS 9.9 Namespace Bypass

A single misconfigured ACL binding rule in HashiCorp's consul-k8s may allow any authenticated Kubernetes user with ServiceAccount creation rights in a neighboring namespace to authenticate as a Consul