Skip to content
OpenAdvisories

Vendor

K3s

1 known vulnerabilities.

Products

K3s 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2025-46599

    CNCF K3s Kubernetes kubelet configuration exposes credentials

    CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255. For example, the default behavior of a K3s online installation might allow unauthenticat…

    K3s K3s github.com/k3s-io/k3s Go