 where the Istio CNI could be used as an attack vector on an already compromised node due to its high level of permissions. The vector involves abusing the <code>istio-cni-repair-role</code> <code>ClusterRole</code> on a compromised node to expand the scope of the compromise from local to the node to a cluster-wide compromise.</p><p>The Istio maintainers are, therefore, gradually rolling out a change to the above <code>ClusterRole</code> that reduces the permissions to close this potential attack vector. In