Skip to content
OpenAdvisories

Product · Kubernetes

Kubelet

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-1767

    Kubernetes GitRepo Volume Inadvertent Local Repository Access

    This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any …

    Kubernetes Kubelet kubectl-1.32 kubelet-1.35 Debian Wolfi Go
  • Medium 5.9
    CVE-2024-9042

    Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API

    This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

    Kubernetes Kubelet k8s.io/kubernetes Go
  • Medium 6.2
    CVE-2025-0426

    Node Denial of Service via kubelet Checkpoint API

    A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.

    Kubernetes Kubelet argocd-image-updater spark-operator Debian Azure Linux Alpine Wolfi Go