Kubernetes

Exploited now

None of this vendor's CVEs are on CISA's known-exploited list.

Recent

• 5.8MediumOct 26, 2026Kubernetes Path traversal / file handlingCVE-2026-76654An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves to a UNC path. As a result, the kubelet will transparently attempt to authenticate to the share using NTLM. This allows an attacker to obtain the NetNTLMv2 hash of the account under which the kubelet is running. An attacker could then attem
• 5.9MediumOct 26, 2026Kubernetes Auth bypass / access controlCVE-2026-2270A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod. An attacker exploiting this vulnerability would have full control over the resulting pod’s metadata and specification, including namespace selection. Note that the cross-namespace pod will be immediately deleted by the garbage collector unless the attacker is able to construct a valid StatefulSet Ow
• 6.5MediumSep 28, 2026Kubernetes Path traversal / file handlingCVE-2026-19444A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in
• 6.5MediumMar 20, 2026Kubernetes CSI Driver for NFS Path traversal / file handlingCVE-2026-3864A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequences
• 8.8HighMar 19, 2026Kubernetes ingress-nginx Code / command injectionCVE-2026-4342A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in
• 8.8HighMar 9, 2026Kubernetes ingress-nginx Code / command injectionCVE-2026-3288A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to
• 8.8HighFeb 6, 2026Kubernetes ingress-nginx Code / command injectionCVE-2025-15566A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets acces
• 6.5MediumFeb 3, 2026Kubernetes ingress-nginx Denial of serviceCVE-2026-24514A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx controller
• 3.1LowFeb 3, 2026Kubernetes ingress-nginxCVE-2026-24513A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in the presence of a specific misconfiguration. If the ingress-nginx controller is configured with a default custom-errors configuration that includes HTTP errors
• 8.8HighFeb 3, 2026Kubernetes ingress-nginx Code / command injectionCVE-2026-24512A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note tha
• 8.8HighFeb 3, 2026Kubernetes ingress-nginx Code / command injectionCVE-2026-1580A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to th
• 5.8MediumDec 14, 2025Kubernetes SSRFCVE-2025-13281A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local
• 6.8MediumSep 16, 2025Kubernetes CSharp Client Crypto / certificateCVE-2025-9708A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority (CA) without properly verifying the trust chain. This flaw allows a malicious actor to present a forged certificate and potentially inter
• 6.5MediumSep 5, 2025Kubernetes secrets-store-sync-controller Information disclosureCVE-2025-7445Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs.
• 6.7MediumAug 27, 2025Kubernetes Auth bypass / access controlCVE-2025-5187A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted,
• 7.5HighAug 17, 2025Kubernetes Image Builder Auth bypass / access controlCVE-2025-7342A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters ar
• 2.7LowJun 23, 2025KubernetesCVE-2025-4563A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled, the controller properly validates resource claim statuses during pod status updates but fails to per
• 8.8HighMar 24, 2025Kubernetes ingress-nginx Code / command injectionCVE-2025-24514A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets a30% likelyExploit-DB · NucleiDetection
• 4.8MediumMar 24, 2025Kubernetes ingress-nginx Path traversal / file handlingCVE-2025-24513A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or 3.3% likely
• 8.8HighMar 24, 2025Kubernetes ingress-nginx Code / command injectionCVE-2025-1098A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx contr82% likelyExploit-DB · NucleiDetection
• 8.8HighMar 24, 2025Kubernetes ingress-nginx Code / command injectionCVE-2025-1097A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of 33% likelyExploit-DB · NucleiDetection
• 9.8CriticalMar 24, 2025Kubernetes ingress-nginx Code / command injectionCVE-2025-1974A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note tha99% likelyExploit-DB · NucleiDetection
• 3.1LowMar 20, 2025Kubernetes kube-apiserverCVE-2024-7598A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies to
• 6.5MediumMar 13, 2025Kubernetes KubeletCVE-2025-1767This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains
• 5.9MediumMar 13, 2025Kubernetes KubeletCVE-2024-9042This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.1.4% likelyDetection
• 6.2MediumFeb 13, 2025Kubernetes kubelet Denial of serviceCVE-2025-0426A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
• 8.1HighNov 22, 2024Kubernetes kubelet Path traversal / file handlingCVE-2024-10220The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.3% likely
• 6.3MediumOct 15, 2024Kubernetes Image Builder Auth bypass / access controlCVE-2024-9594A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The credentials are disabled at the conclusion1.7% likely
• 9.8CriticalOct 15, 2024Kubernetes Image Builder Auth bypass / access controlCVE-2024-9486A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nodes using the resulting images may be acce2.2% likely
• 8.8HighAug 16, 2024Kubernetes ingress-nginxCVE-2024-7646A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default co27% likely
• 6.1MediumJul 18, 2024Kubernetes Privilege escalationCVE-2024-5321A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
• 6.5MediumMay 15, 2024Kubernetes azure-file-csi-driver Information disclosureCVE-2024-3744A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cloud vault solutions. Tokens are only logged when T
• 2.7LowApr 22, 2024KubernetesCVE-2024-3177Kubernetes ServiceAccount admission plugin. An attacker gains the ability to bypass mountable secrets policy. Update the Kubernetes ServiceAccount admission plugin to the latest version.2.2% likelyExploit code
• 7.2HighNov 14, 2023Kubernetes kubeletCVE-2023-5528A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.4.3% likely
• 5.1MediumNov 3, 2023Kubernetes kube-apiserver SSRFCVE-2022-3172A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties.2.5% likelyExploit code
• 8.8HighNov 3, 2023Kubernetes csi-proxyCVE-2023-3893A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy.2.5% likely
• 8.8HighOct 31, 2023Kubernetes kubeletCVE-2023-3955A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.4% likely
• 8.8HighOct 31, 2023Kubernetes kubeletCVE-2023-3676A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.13% likely
• 7.6HighOct 25, 2023Kubernetes ingress-nginx Code / command injectionCVE-2023-5044Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.57% likelyExploit codeDetection
• 7.6HighOct 25, 2023Kubernetes ingress-nginxCVE-2023-5043Ingress nginx annotation injection causes arbitrary command execution.2.2% likelyExploit code
• 8.8HighOct 25, 2023Kubernetes ingress-nginxCVE-2022-4886Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.1.6% likely
• 6.5MediumJul 3, 2023KubernetesCVE-2023-2728(1) Kubernetes clusters with ServiceAccount admission plugin enabled are affected. (2) An attacker gains the ability to bypass mountable secrets policy and access unauthorized secrets. (3) Update to the latest version of Kubernetes and ensure the ServiceAccount admission plugin is properly configured.2.2% likelyExploit code
• 6.5MediumJul 3, 2023KubernetesCVE-2023-2727Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.1.1% likely
• 3.4LowJun 16, 2023KubernetesCVE-2023-2431Kubelet, specifically pods using localhost type seccomp profile with empty profile field. An attacker gains the ability to execute system calls unrestricted. Implement and enforce strict seccomp profile validation on all pods.Exploit code
• 6.5MediumJun 7, 2023Kubernetes secrets-store-csi-driver Information disclosureCVE-2023-2878Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs.
• 7.8HighMay 24, 2023Kubernetes Auth bypass / access controlCVE-2021-25749Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.
• 7.6HighMay 24, 2023Kubernetes ingress-nginxCVE-2021-25748A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the `spec.rules[].http.paths[].path` field of an Ingress object (in the `networking.k8s.io` or `extensions` API group) to obtain the crede
• 6.6MediumMar 1, 2023KubernetesCVE-2022-3294Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to es1.6% likelyExploit code
• 6.5MediumMar 1, 2023Kubernetes Path traversal / file handlingCVE-2022-3162Affected: Kubernetes clusters with multiple CustomResourceDefinitions in the same API group. Attacker gain: Unauthorized access to custom resources of a different type within the same API group. Recommended action: Ensure that custom resource definitions are isolated within separate API groups or restrict access to specific custom resource definitions.1.2% likelyExploit code
• 7.6HighMay 6, 2022Kubernetes ingress-nginxCVE-2021-25746A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that 1.4% likely

See every Kubernetes entry on the dashboard.

Top products

• ingress-nginx7 CVEs in the last year
• Kubernetes4 CVEs in the last year
• CSI Driver for NFS1 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• Kubernetes · Sep 14, 2026CVE-2026-76654CVE-2026-76654
• Kubernetes · Sep 14, 2026CVE-2026-2270CVE-2026-2270
• Kubernetes · Aug 10, 2026CVE-2026-19444CVE-2026-19444
• Kubernetes · Mar 19, 2026CVE-2026-4342CVE-2026-4342
• Kubernetes · Mar 17, 2026CVE-2026-3864CVE-2026-3864
• Kubernetes · Mar 9, 2026CVE-2026-3288CVE-2026-3288
• Kubernetes · Feb 6, 2026CVE-2025-15566CVE-2025-15566
• Kubernetes · Feb 2, 2026CVE-2026-24514CVE-2026-24514
• Kubernetes · Feb 2, 2026CVE-2026-24513CVE-2026-24513
• Kubernetes · Feb 2, 2026CVE-2026-24512CVE-2026-24512
• Kubernetes · Feb 2, 2026CVE-2026-1580CVE-2026-1580
• Kubernetes · Nov 30, 2025CVE-2025-13281CVE-2025-13281
• Kubernetes · Sep 15, 2025CVE-2025-9708CVE-2025-9708
• Kubernetes · Sep 4, 2025CVE-2025-7445CVE-2025-7445
• Kubernetes · Aug 11, 2025CVE-2025-5187CVE-2025-5187