Kubernetes vulnerabilities
107 CVEs and advisories name Kubernetes as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116472ingress-nginx mirror-target self-DOS
- CVE-2026-2270StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation
- CVE-2026-76654Subpath symlinking on Windows nodes permits NTLM coercion
- CVE-2026-19444Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes
- CVE-2026-15687Path traversal via non-tar copyDirectoryFromPod
- CVE-2026-3864CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server
- CVE-2026-4342ingress-nginx comment-based nginx configuration injection
- CVE-2026-3288ingress-nginx rewrite-target nginx configuration injection
- CVE-2025-15566ingress-nginx auth-proxy-set-headers nginx configuration injection
- CVE-2026-24514ingress-nginx Admission Controller denial of service
- CVE-2026-24513ingress-nginx auth-url protection bypass
- CVE-2026-24512ingress-nginx auth-method nginx configuration injection
- CVE-2026-1580ingress-nginx auth-method nginx configuration injection
- CVE-2025-13281Portworx Half-Blind SSRF in kube-controller-manager
- CVE-2025-9708Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks
- CVE-2025-7445Kubernetes secrets-store-sync-controller discloses service account tokens in logs
- CVE-2025-5187Nodes can delete themselves by adding an OwnerReference
- CVE-2025-7342VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override
- CVE-2025-4563Nodes can bypass dynamic resource allocation authorization checks
- CVE-2025-24514ingress-nginx controller - configuration injection via unsanitized auth-url annotation
- CVE-2025-24513ingress-nginx controller - auth secret file path traversal vulnerability
- CVE-2025-1098ingress-nginx controller - configuration injection via unsanitized mirror annotations
- CVE-2025-1097ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
- CVE-2025-1974ingress-nginx admission controller RCE escalation
- CVE-2024-7598Network restriction bypass via race condition during namespace termination
- CVE-2025-1767This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same
- CVE-2024-9042This CVE affects only Windows worker nodes.
- CVE-2025-0426A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read
- CVE-2024-10220Arbitrary command execution through gitRepo volume
- CVE-2024-9594VM images built with Image Builder with some providers use default credentials during builds