Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Kubernetes — Vulnerabilities & Security Advisories 102

Browse all 102 CVE security advisories affecting Kubernetes. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Kubernetes serves as an open-source container orchestration platform, automating the deployment, scaling, and management of containerized applications across distributed clusters. Its complex architecture, involving numerous interacting components like the API server and kubelet, historically exposes it to diverse vulnerability classes. Common issues include remote code execution (RCE) via unauthenticated API endpoints, privilege escalation through misconfigured role-based access controls, and cross-site scripting (XSS) in the web dashboard. With over 100 recorded CVEs, the platform has faced significant security challenges, including incidents where attackers exploited weak authentication mechanisms to gain cluster-wide control. These vulnerabilities often stem from default configurations or delayed patching of underlying dependencies. Consequently, securing Kubernetes requires rigorous network segmentation, strict identity management, and continuous monitoring to mitigate risks associated with its intricate service mesh and dynamic workload scheduling capabilities.

Found 51 results / 102Clear Filters
Top products by Kubernetes: Kubernetes ingress-nginx kubelet Kubernetes ingress-nginx Minikube Image Builder Kubernetes Secrets Store CSI Driver Kubernetes Java Client kube-apiserver CSI Driver for NFS Kubernetes CSharp Client secrets-store-sync-controller azure-file-csi-driver csi-proxy kops secrets-store-csi-driver aws-iam-authenticator CSI Snapshotter kubernetes-csi external-provisioner k8s.gcr.io/defaultbackend
CVE IDTitleCVSSSeverityPublished
CVE-2025-13281 Portworx Half-Blind SSRF in kube-controller-manager — KubernetesCWE-918 5.8 Medium2025-12-14
CVE-2025-5187 Nodes can delete themselves by adding an OwnerReference — KubernetesCWE-863 6.7 Medium2025-08-27
CVE-2025-4563 Nodes can bypass dynamic resource allocation authorization checks — KubernetesCWE-20 2.7 Low2025-06-23
CVE-2024-5321 Incorrect permissions on Windows containers logs — KubernetesCWE-276 6.1 Medium2024-07-18
CVE-2024-3177 Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin — KubernetesCWE-20 2.7 Low2024-04-22
CVE-2021-25736 Windows kube-proxy LoadBalancer contention — Kubernetes 5.8 Medium2023-10-30
CVE-2023-2728 Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin — KubernetesCWE-20 6.5 Medium2023-07-03
CVE-2023-2727 Bypassing policies imposed by the ImagePolicyWebhook admission plugin — KubernetesCWE-20 6.5 Medium2023-07-03
CVE-2023-2431 Bypass of seccomp profile enforcement — KubernetesCWE-1287 3.4 Low2023-06-16
CVE-2021-25749 runAsNonRoot logic bypass for Windows containers — KubernetesCWE-284 7.8 High2023-05-24
CVE-2022-3294 Node address isn't always verified when proxying — KubernetesCWE-20 6.6 Medium2023-03-01
CVE-2022-3162 Unauthorized read of Custom Resources — KubernetesCWE-23 6.5 Medium2023-03-01
CVE-2020-8562 Bypass of Kubernetes API Server proxy TOCTOU — KubernetesCWE-367 2.2 Low2022-02-01
CVE-2021-25743 ANSI escape characters in kubectl output are not being filtered — KubernetesCWE-150 3.0 Low2022-01-07
CVE-2021-25741 Symlink Exchange Can Allow Host Filesystem Access — KubernetesCWE-20 8.8 High2021-09-20
CVE-2021-25740 Holes in EndpointSlice Validation Enable Host Network Hijack — KubernetesCWE-441 3.1 Low2021-09-20
CVE-2020-8561 Webhook redirect in kube-apiserver — KubernetesCWE-441 4.1 Medium2021-09-20
CVE-2021-25737 Holes in EndpointSlice Validation Enable Host Network Hijack — KubernetesCWE-184 2.7 Low2021-09-06
CVE-2021-25735 Validating Admission Webhook does not observe some previous fields — KubernetesCWE-372 6.5 Medium2021-09-06
CVE-2020-8554 Kubernetes man in the middle using LoadBalancer or ExternalIPs — KubernetesCWE-283 6.3 Medium2021-01-21
CVE-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager — KubernetesCWE-532 4.7 Medium2020-12-07
CVE-2020-8564 Docker config secrets leaked when file is malformed and loglevel >= 4 — KubernetesCWE-532 4.7 Medium2020-12-07
CVE-2020-8565 Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9 — KubernetesCWE-532 4.7 Medium2020-12-07
CVE-2020-8566 Ceph RBD adminSecrets exposed in logs when loglevel >= 4 — KubernetesCWE-532 4.7 Medium2020-12-07
CVE-2020-8558 Kubernetes node setting allows for neighboring hosts to bypass localhost boundary — KubernetesCWE-420 5.4 Medium2020-07-27
CVE-2020-8557 Kubernetes node disk Denial of Service by writing to container /etc/hosts — KubernetesCWE-400 5.5 Medium2020-07-23
CVE-2019-11252 Credential leakage when failing to mount — KubernetesCWE-209 5.9 Medium2020-07-23
CVE-2020-8559 Privilege escalation from compromised node to cluster — KubernetesCWE-601 6.4 Medium2020-07-22
CVE-2020-8555 Kubernetes kube-controller-manager SSRF — KubernetesCWE-918 6.3 Medium2020-06-04
CVE-2019-11254 Kubernetes API Server denial of service vulnerability from malicious YAML payloads — KubernetesCWE-1050 6.5 Medium2020-04-01

This page lists every published CVE security advisory associated with Kubernetes. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.