Unpatchable Vulnerabilities of Kubernetes: CVE-2021-25740

CVE-2021-25740 exposes a fundamental Kubernetes design flaw where users with permission to modify EndpointSlice objects can maliciously redirect shared ingress or load balancer traffic, bypassing network security controls in multi-tenant clusters—a vulnerability that cannot be patched, only mitigated through careful access and architectural controls.