Skip to content
OpenAdvisories

Product · Kubernetes

Kubelet

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2024-10220 Public exploit

    Arbitrary command execution through gitRepo volume

    The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

    Kubernetes Kubelet kubeflow-pipelines-apiserver kubeflow-pipelines-frontend Debian Azure Linux Wolfi Go
  • High 7.2
    CVE-2023-5528

    Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation

    A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plug…

    Kubernetes Kubelet prometheus-adapter spark-operator Azure Linux Wolfi Go
  • High 8.8
    CVE-2023-3955

    Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

    A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

    Kubernetes Kubelet kubeflow-pipelines-apiserver aws-efs-csi-driver Debian Wolfi Go
  • High 8.8
    CVE-2023-3676 EPSS 13%

    Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

    A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

    Kubernetes Kubelet k8s.io/kubernetes kubernetes Debian Go