Kubernetes vulnerabilities
107 CVEs and advisories name Kubernetes as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-9486VM images built with Image Builder and Proxmox provider use default credentials
- CVE-2024-7646A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `ex
- CVE-2024-5321Incorrect permissions on Windows containers logs
- CVE-2024-3744Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs
- CVE-2024-3177Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
- CVE-2023-5528Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation
- CVE-2022-3172Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)
- CVE-2023-3893Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
- CVE-2023-3955Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation
- CVE-2023-3676Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation
- CVE-2021-25736Windows kube-proxy LoadBalancer contention
- CVE-2023-5044Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
- CVE-2023-5043Ingress nginx annotation injection causes arbitrary command execution
- CVE-2022-4886Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
- CVE-2023-1943Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode
- CVE-2023-2728Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin
- CVE-2023-2727Bypassing policies imposed by the ImagePolicyWebhook admission plugin
- CVE-2023-2431Bypass of seccomp profile enforcement
- CVE-2023-2878Kubernetes secrets-store-csi-driver discloses service account tokens in logs
- CVE-2023-1944[minikube] ssh server with default password
- CVE-2023-1174[minikube] Network Port exposure in minikube running on macOS using Docker driver
- CVE-2021-25749runAsNonRoot logic bypass for Windows containers
- CVE-2021-25748Ingress-nginx `path` sanitization can be bypassed with newline character
- CVE-2022-3294Node address isn't always verified when proxying
- CVE-2022-3162Unauthorized read of Custom Resources
- CVE-2022-2385AccessKeyID validation bypass
- CVE-2021-25746Ingress-nginx directive injection via annotations
- CVE-2021-25745Ingress-nginx path can be pointed to service account token file
- CVE-2020-8562Bypass of Kubernetes API Server proxy TOCTOU
- CVE-2021-25743ANSI escape characters in kubectl output are not being filtered