kubernetes

Latest CVEs · RSS

• CVE-2026-19444 2026-09-28 · CVSS 6.5
  A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl run
• CVE-2026-15687 2026-07-23 · CVSS 2.7
  A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the clie
• CVE-2026-3864 2026-03-20 · CVSS 6.5
  A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers wit
• CVE-2026-4342 2026-03-19 · CVSS 8.8
  A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arb
• CVE-2026-3288 2026-03-09 · CVSS 8.8
  A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration i
• CVE-2025-15566 2026-02-06 · CVSS 8.8
  A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configu
• CVE-2026-24514 2026-02-03 · CVSS 6.5
  A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large
• CVE-2026-24513 2026-02-03 · CVSS 3.1
  A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may not be effective in the presence of a sp
• CVE-2026-24512 2026-02-03 · CVSS 8.8
  A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead t
• CVE-2026-1580 2026-02-03 · CVSS 8.8
  A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into
• CVE-2025-13281 2025-12-14 · CVSS 5.8
  A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability
• CVE-2025-9708 2025-09-16 · CVSS 6.8
  A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed certificates from any Certificate Authori
• CVE-2025-7445 2025-09-05 · CVSS 6.5
  Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs.
• CVE-2025-5187 2025-08-27 · CVSS 6.7
  A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patchin
• CVE-2025-7342 2025-08-17 · CVSS 7.5
  A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nuta
• CVE-2025-4563 2025-06-23 · CVSS 2.7
  A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicReso
• CVE-2025-24514 2025-03-24 · CVSS 8.8
  A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject con
• CVE-2025-24513 2025-03-24 · CVSS 4.8
  A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the in
• CVE-2025-1098 2025-03-24 · CVSS 8.8
  A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations c
• CVE-2025-1097 2025-03-24 · CVSS 8.8
  A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to i
• CVE-2025-1974 2025-03-24 · CVSS 9.8
  A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary c
• CVE-2024-7598 2025-03-20 · CVSS 3.1
  A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespa
• CVE-2025-1767 2025-03-13 · CVSS 6.5
  This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-t
• CVE-2024-9042 2025-03-13 · CVSS 5.9
  This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.
• CVE-2025-0426 2025-02-13 · CVSS 6.2
  A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint