CVEs we hold for Kubernetes

Records whose assigning authority named Kubernetes as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-4342ingress-nginx comment-based nginx configuration injectionKubernetes ingress-nginx

CVE-2026-3864CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS serverKubernetes CSI Driver for NFS

CVE-2026-3288ingress-nginx rewrite-target nginx configuration injectionKubernetes ingress-nginx

CVE-2026-24514ingress-nginx Admission Controller denial of serviceKubernetes ingress-nginx

CVE-2026-24513ingress-nginx auth-url protection bypassKubernetes ingress-nginx

CVE-2026-24512ingress-nginx auth-method nginx configuration injectionKubernetes ingress-nginx

CVE-2026-1580ingress-nginx auth-method nginx configuration injectionKubernetes ingress-nginx

CVE-2026-15687Path traversal via non-tar copyDirectoryFromPodkubernetes-client/java

CVE-2025-9708Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacksKubernetes CSharp Client

CVE-2025-7445Kubernetes secrets-store-sync-controller discloses service account tokens in logsKubernetes secrets-store-sync-controller

CVE-2025-7342VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if…Kubernetes Image Builder

CVE-2025-53542Kubernetes Headlamp Allows Arbitrary Command Injection in macOS Process headlamp@codeSignkubernetes-sigs headlamp

CVE-2025-5187Nodes can delete themselves by adding an OwnerReferenceKubernetes

CVE-2025-4563Nodes can bypass dynamic resource allocation authorization checksKubernetes

CVE-2025-24514ingress-nginx controller - configuration injection via unsanitized auth-url annotationkubernetes ingress-nginx

CVE-2025-24513ingress-nginx controller - auth secret file path traversal vulnerabilitykubernetes ingress-nginx

CVE-2025-1974ingress-nginx admission controller RCE escalationkubernetes ingress-nginx

CVE-2025-1767no title heldKubernetes Kubelet

CVE-2025-15566ingress-nginx auth-proxy-set-headers nginx configuration injectionKubernetes ingress-nginx

CVE-2025-13281Portworx Half-Blind SSRF in kube-controller-managerKubernetes

CVE-2025-1098ingress-nginx controller - configuration injection via unsanitized mirror annotationskubernetes ingress-nginx

CVE-2025-1097ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotationkubernetes ingress-nginx

CVE-2025-0426no title heldKubernetes kubelet

CVE-2024-9594VM images built with Image Builder with some providers use default credentials during buildsKubernetes Image Builder

CVE-2024-9486VM images built with Image Builder and Proxmox provider use default credentialsKubernetes Image Builder

CVE-2024-9042no title heldKubernetes Kubelet

CVE-2024-7646no title heldKubernetes ingress-nginx

CVE-2024-7598Network restriction bypass via race condition during namespace terminationKubernetes kube-apiserver

CVE-2024-5321Incorrect permissions on Windows containers logsKubernetes

CVE-2024-3744Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logsKubernetes azure-file-csi-driver

CVE-2024-3177Bypassing mountable secrets policy imposed by the ServiceAccount admission pluginKubernetes

CVE-2024-10220Arbitrary command execution through gitRepo volumeKubernetes kubelet

CVE-2023-5528Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalationKubernetes kubelet

CVE-2023-5044Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotationKubernetes ingress-nginx

CVE-2023-5043Ingress nginx annotation injection causes arbitrary command executionKubernetes ingress-nginx

CVE-2023-3955Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalationKubernetes kubelet

CVE-2023-3893Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalationKubernetes csi-proxy

CVE-2023-3676Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalationKubernetes kubelet

CVE-2023-2878Kubernetes secrets-store-csi-driver discloses service account tokens in logsKubernetes secrets-store-csi-driver

CVE-2023-2728Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission pluginKubernetes

CVE-2023-2727Bypassing policies imposed by the ImagePolicyWebhook admission pluginKubernetes

CVE-2023-2431Bypass of seccomp profile enforcementKubernetes

CVE-2023-1944[minikube] ssh server with default passwordKubernetes minikube

CVE-2023-1943Privilege Escalation in kOps using GCE/GCP Provider in Gossip ModeKubernetes kops

CVE-2023-1174[minikube] Network Port exposure in minikube running on macOS using Docker driverKubernetes minikube

CVE-2022-4886Ingress-nginx `path` sanitization can be bypassed with `log_format` directiveKubernetes ingress-nginx

CVE-2022-3294Node address isn't always verified when proxyingKubernetes

CVE-2022-3248Openshift api admission checks does not enforce "custom-host" permissionsn/a kubernetes; Red Hat Advanced Cluster Management for…

CVE-2022-3172Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)Kubernetes kube-apiserver

CVE-2022-3162Unauthorized read of Custom ResourcesKubernetes

CVE-2022-2385AccessKeyID validation bypassKubernetes aws-iam-authenticator

CVE-2021-4178no title heldn/a kubernetes-client

CVE-2021-25749runAsNonRoot logic bypass for Windows containersKubernetes

CVE-2021-25748Ingress-nginx `path` sanitization can be bypassed with newline characterKubernetes ingress-nginx

CVE-2021-25746Ingress-nginx directive injection via annotationsKubernetes ingress-nginx

CVE-2021-25745Ingress-nginx path can be pointed to service account token fileKubernetes ingress-nginx

CVE-2021-25743ANSI escape characters in kubectl output are not being filteredKubernetes

CVE-2021-25742Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespacesKubernetes ingress-nginx

CVE-2021-25741Symlink Exchange Can Allow Host Filesystem AccessKubernetes

CVE-2021-25740Holes in EndpointSlice Validation Enable Host Network HijackKubernetes

CVE-2021-25738Code exec via yaml parsingKubernetes Java Client

CVE-2021-25737Holes in EndpointSlice Validation Enable Host Network HijackKubernetes

CVE-2021-25736Windows kube-proxy LoadBalancer contentionKubernetes

CVE-2021-25735Validating Admission Webhook does not observe some previous fieldsKubernetes

CVE-2020-8570Kubernetes Java client libraries unvalidated path traversal in Copy implementationKubernetes Java Client

CVE-2020-8569Kubernetes CSI snapshot-controller DoSKubernetes CSI Snapshotter

CVE-2020-8568Kubernetes Secrets Store CSI Driver sync/rotate directory traversalKubernetes Secrets Store CSI Driver

CVE-2020-8567Kubernetes Secrets Store CSI Driver plugin directory traversalsKubernetes Secrets Store CSI Driver

CVE-2020-8566Ceph RBD adminSecrets exposed in logs when loglevel >= 4Kubernetes

CVE-2020-8565Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9Kubernetes

CVE-2020-8564Docker config secrets leaked when file is malformed and loglevel >= 4Kubernetes

CVE-2020-8563Secret leaks in logs for vSphere Provider kube-controller-managerKubernetes

CVE-2020-8562Bypass of Kubernetes API Server proxy TOCTOUKubernetes

CVE-2020-8561Webhook redirect in kube-apiserverKubernetes

CVE-2020-8559Privilege escalation from compromised node to clusterKubernetes

CVE-2020-8558Kubernetes node setting allows for neighboring hosts to bypass localhost boundaryKubernetes

CVE-2020-8557Kubernetes node disk Denial of Service by writing to container /etc/hostsKubernetes

CVE-2020-8555Kubernetes kube-controller-manager SSRFKubernetes

CVE-2020-8554Kubernetes man in the middle using LoadBalancer or ExternalIPsKubernetes

CVE-2020-8553Kubernetes ingress-nginx Compromise of auth via subset/superset namespace namesKubernetes ingress-nginx

CVE-2020-8552Kubernetes API server denial of serviceKubernetes

CVE-2020-8551Kubernetes kubelet denial of serviceKubernetes

CVE-2019-11255Kubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutationkubernetes-csi external-resizer

CVE-2019-11254Kubernetes API Server denial of service vulnerability from malicious YAML payloadsKubernetes

CVE-2019-11253Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attackKubernetes

CVE-2019-11252Credential leakage when failing to mountKubernetes

CVE-2019-11251kubectl cp allows symlink directory traversalKubernetes

CVE-2019-11250Kubernetes client-go logs authorization headers at debug verbosity levelsKubernetes

CVE-2019-11249kubectl cp allows symlink directory traversalKubernetes

CVE-2019-11248Kubernetes kubelet exposes /debug/pprof info on healthz portKubernetes

CVE-2019-11247Kubernetes kube-apiserver allows access to custom resources via wrong scopeKubernetes

CVE-2019-11246kubectl cp allows symlink directory traversalKubernetes

CVE-2019-11245kubelet-started container uid changes to root after first restart or if image is already pulled to the nodeKubernetes

CVE-2019-11244kubectl creates world-writeable cached schema filesKubernetes

CVE-2019-11243no title heldKubernetes

CVE-2019-1002101kubectl cp path traversalKubernetes

CVE-2019-1002100no title heldKubernetes

CVE-2018-1002105no title heldKubernetes

CVE-2018-1002104no title heldKubernetes k8s.gcr.io/defaultbackend

CVE-2018-1002103no title heldKubernetes Minikube

CVE-2018-1002102Kubernetes API server follows unvalidated redirects from streaming Kubelet endpointsKubernetes

CVE-2018-1002101no title heldKubernetes

CVE-2018-1002100no title heldKubernetes

CVE-2017-1002102no title heldKubernetes

CVE-2017-1002101no title heldKubernetes

CVE-2017-1002100no title heldKubernetes

106 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.