Fragnesia Is a Host Breakout. If Your GKE Nodes Are Ubuntu, Read the Bulletin
CVE-2026-46300 lets an unprivileged process inside a container reach root on the host. Google says Standard plus Ubuntu is in. COS, Autopilot, and GKE Sandbox are out. Patch versions are on GCP-2026-033.