https://vulnogram.org/ Most recent CVEs assigned by Kubernetes (kubernetes). https://vulnogram.org/seaview/icons/kubernetes.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-19444 https://vulnogram.org/CVE-2026-19444 A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpa… Medium Mon, 28 Sep 2026 11:38:10 GMT https://vulnogram.org/CVE-2026-15687 https://vulnogram.org/CVE-2026-15687 A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompre… Low Thu, 23 Jul 2026 18:43:25 GMT https://vulnogram.org/CVE-2026-3864 https://vulnogram.org/CVE-2026-3864 A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volum… Medium Fri, 20 Mar 2026 22:21:33 GMT https://vulnogram.org/CVE-2026-4342 https://vulnogram.org/CVE-2026-4342 A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Se… High Thu, 19 Mar 2026 21:50:17 GMT https://vulnogram.org/CVE-2026-3288 https://vulnogram.org/CVE-2026-3288 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx c… High Mon, 09 Mar 2026 21:00:48 GMT https://vulnogram.org/CVE-2025-15566 https://vulnogram.org/CVE-2025-15566 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress… High Fri, 06 Feb 2026 03:13:51 GMT https://vulnogram.org/CVE-2026-24514 https://vulnogram.org/CVE-2026-24514 A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption… Medium Tue, 03 Feb 2026 22:17:25 GMT https://vulnogram.org/CVE-2026-24513 https://vulnogram.org/CVE-2026-24513 A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in the presence of a specific misconfiguration. If the ingress-nginx controller is configured with a default cust… Low Tue, 03 Feb 2026 22:17:17 GMT https://vulnogram.org/CVE-2026-24512 https://vulnogram.org/CVE-2026-24512 A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure… High Tue, 03 Feb 2026 22:17:08 GMT https://vulnogram.org/CVE-2026-1580 https://vulnogram.org/CVE-2026-1580 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx cont… High Tue, 03 Feb 2026 22:16:47 GMT https://vulnogram.org/CVE-2025-13281 https://vulnogram.org/CVE-2025-13281 A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the c… Medium Sun, 14 Dec 2025 21:27:34 GMT https://vulnogram.org/CVE-2025-9708 https://vulnogram.org/CVE-2025-9708 A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority (CA) without properly verifying the trust chain. This flaw allows a malicious actor to… Medium Network Exploitable Tue, 16 Sep 2025 21:08:05 GMT https://vulnogram.org/CVE-2025-7445 https://vulnogram.org/CVE-2025-7445 Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs. Medium Fri, 05 Sep 2025 02:31:35 GMT https://vulnogram.org/CVE-2025-5187 https://vulnogram.org/CVE-2025-5187 A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference re… Medium Wed, 27 Aug 2025 16:20:56 GMT https://vulnogram.org/CVE-2025-7342 https://vulnogram.org/CVE-2025-7342 A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at t… High Network Exploitable Sun, 17 Aug 2025 23:03:56 GMT https://vulnogram.org/CVE-2025-4563 https://vulnogram.org/CVE-2025-4563 A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled, the controller properly validates resource claim s… Low Mon, 23 Jun 2025 15:38:42 GMT https://vulnogram.org/CVE-2025-24514 https://vulnogram.org/CVE-2025-24514 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingre… High Mon, 24 Mar 2025 23:29:36 GMT https://vulnogram.org/CVE-2025-24513 https://vulnogram.org/CVE-2025-24513 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the contai… Medium Network Exploitable Mon, 24 Mar 2025 23:29:25 GMT https://vulnogram.org/CVE-2025-1098 https://vulnogram.org/CVE-2025-1098 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code exe… High Mon, 24 Mar 2025 23:29:15 GMT https://vulnogram.org/CVE-2025-1097 https://vulnogram.org/CVE-2025-1097 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of… High Mon, 24 Mar 2025 23:29:05 GMT https://vulnogram.org/CVE-2025-1974 https://vulnogram.org/CVE-2025-1974 A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure… Critical Network Exploitable Mon, 24 Mar 2025 23:28:48 GMT https://vulnogram.org/CVE-2024-7598 https://vulnogram.org/CVE-2024-7598 A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not de… Low Thu, 20 Mar 2025 16:52:57 GMT https://vulnogram.org/CVE-2025-1767 https://vulnogram.org/CVE-2025-1767 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstr… Medium Thu, 13 Mar 2025 16:40:42 GMT https://vulnogram.org/CVE-2024-9042 https://vulnogram.org/CVE-2024-9042 This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below. Medium Thu, 13 Mar 2025 16:40:13 GMT https://vulnogram.org/CVE-2025-0426 https://vulnogram.org/CVE-2025-0426 A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk. Medium Thu, 13 Feb 2025 15:16:13 GMT https://vulnogram.org/CVE-2024-10220 https://vulnogram.org/CVE-2024-10220 The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2. High Fri, 22 Nov 2024 16:23:00 GMT https://vulnogram.org/CVE-2024-9594 https://vulnogram.org/CVE-2024-9594 A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root acce… Medium Tue, 15 Oct 2024 20:37:01 GMT https://vulnogram.org/CVE-2024-9486 https://vulnogram.org/CVE-2024-9486 A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials… Critical Network Exploitable Tue, 15 Oct 2024 20:33:43 GMT https://vulnogram.org/CVE-2024-7646 https://vulnogram.org/CVE-2024-7646 A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials… High Fri, 16 Aug 2024 17:36:53 GMT https://vulnogram.org/CVE-2024-5321 https://vulnogram.org/CVE-2024-5321 A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs. Medium Thu, 18 Jul 2024 18:15:25 GMT https://vulnogram.org/CVE-2024-3744 https://vulnogram.org/CVE-2024-3744 A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cl… Medium Wed, 15 May 2024 00:42:36 GMT https://vulnogram.org/CVE-2024-3177 https://vulnogram.org/CVE-2024-3177 A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with… Low Mon, 22 Apr 2024 23:00:39 GMT https://vulnogram.org/CVE-2023-5528 https://vulnogram.org/CVE-2023-5528 A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree sto… High Tue, 14 Nov 2023 20:32:08 GMT https://vulnogram.org/CVE-2022-3172 https://vulnogram.org/CVE-2022-3172 A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to thi… Medium Fri, 03 Nov 2023 18:11:53 GMT https://vulnogram.org/CVE-2023-3893 https://vulnogram.org/CVE-2023-3893 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows no… High Fri, 03 Nov 2023 17:34:10 GMT https://vulnogram.org/CVE-2023-3955 https://vulnogram.org/CVE-2023-3955 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes. High Tue, 31 Oct 2023 20:36:54 GMT https://vulnogram.org/CVE-2023-3676 https://vulnogram.org/CVE-2023-3676 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes. High Tue, 31 Oct 2023 20:22:53 GMT https://vulnogram.org/CVE-2021-25736 https://vulnogram.org/CVE-2021-25736 Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress[].ip” field. Clust… Medium Mon, 30 Oct 2023 02:19:48 GMT https://vulnogram.org/CVE-2023-5044 https://vulnogram.org/CVE-2023-5044 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation. High Wed, 25 Oct 2023 19:19:08 GMT https://vulnogram.org/CVE-2023-5043 https://vulnogram.org/CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution. High Wed, 25 Oct 2023 19:18:57 GMT https://vulnogram.org/CVE-2022-4886 https://vulnogram.org/CVE-2022-4886 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive. High Wed, 25 Oct 2023 19:18:45 GMT https://vulnogram.org/CVE-2023-1943 https://vulnogram.org/CVE-2023-1943 Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode. High Wed, 11 Oct 2023 23:01:50 GMT https://vulnogram.org/CVE-2023-2728 https://vulnogram.org/CVE-2023-2728 Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specifi… Medium Mon, 03 Jul 2023 20:06:11 GMT https://vulnogram.org/CVE-2023-2727 https://vulnogram.org/CVE-2023-2727 Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers… Medium Mon, 03 Jul 2023 20:05:04 GMT https://vulnogram.org/CVE-2023-2431 https://vulnogram.org/CVE-2023-2431 A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerabili… Low Fri, 16 Jun 2023 07:08:33 GMT https://vulnogram.org/CVE-2023-2878 https://vulnogram.org/CVE-2023-2878 Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs. Medium Wed, 07 Jun 2023 14:35:10 GMT https://vulnogram.org/CVE-2023-1944 https://vulnogram.org/CVE-2023-1944 This vulnerability enables ssh access to minikube container using a default password. High Wed, 24 May 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-1174 https://vulnogram.org/CVE-2023-1174 This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container. Critical Network Exploitable Wed, 24 May 2023 00:00:00 GMT https://vulnogram.org/CVE-2021-25749 https://vulnogram.org/CVE-2021-25749 Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true. High Wed, 24 May 2023 00:00:00 GMT https://vulnogram.org/CVE-2021-25748 https://vulnogram.org/CVE-2021-25748 A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the `spec.rules[].http.paths[].path` field of an Ingress object (in the `networking.k8s.… High Wed, 24 May 2023 00:00:00 GMT