Description
This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kubernetes | Kubelet | <=v1.29.12, v1.30 – ≤ v1.30.8, v1.31 – ≤ v1.31.4, v1.32 – ≤ v1.32.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250327T184518-1.1 | openSUSE-SU-2025:14937-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | k8s.io/kubernetes | < 1.29.13 | 1.29.13 | GHSA-vv39-3w5q-974q |
| Go | k8s.io/kubernetes | >= 1.30.0-alpha.0, < 1.30.9 | 1.30.9 | GHSA-vv39-3w5q-974q |
| Go | k8s.io/kubernetes | >= 1.31.0-alpha.0, < 1.31.5 | 1.31.5 | GHSA-vv39-3w5q-974q |
| Go | k8s.io/kubernetes | >= 1.32.0-alpha.0, < 1.32.1 | 1.32.1 | GHSA-vv39-3w5q-974q |
| Go | k8s.io/kubernetes | < 1.29.13 · >= 1.30.0-alpha.0, < 1.30.9 · >= 1.31.0-alpha.0, < 1.31.5 · >= 1.32.0-alpha.0, < 1.32.1 | 1.29.13, 1.30.9, 1.31.5, 1.32.1 | GO-2025-3522 |
Advisories 2
- openSUSE-SU-2025:14937-1 govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-0104 Kubernetes: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Dec 10, 2025