AIKIDO-2026-10446

TL;DR

The operator deployed Dragonfly with the admin listener on port 9999 using --admin_nopass, but did not apply any Kubernetes NetworkPolicy to limit which workloads could reach that port. Any pod on the cluster network could therefore open a connection to the unauthenticated admin interface and run privileged commands such as SLAVEOF, REPLTAKEOVER, CONFIG SET, and CLIENT KILL. A compromised or malicious workload could abuse that reachability to hijack replication, read or exfiltrate data, or corrupt state. The fix generates a NetworkPolicy per instance (on by default) that restricts admin-port ingress to the operator control plane and peer Dragonfly pods while leaving the client port broadly reachable.