Kubernetes Kubelet vulnerabilities

7 vulnerabilities

Known vulnerabilities in Kubernetes Kubelet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2025-1767chainguardargo-cd-2.11+721
EPSS score
0.70%
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.6.2CVE-2025-0426chainguardargo-cd-2.11+266
EPSS score
0.37%
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.5.9CVE-2024-9042chainguardargo-cd-2.11+90
EPSS score
1.40%
This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.8.1CVE-2024-10220chainguardargo-cd-2.11+59
EPSS score
3.03%
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.8.8CVE-2023-5528chainguardaws-ebs-csi-driver+33
EPSS score
4.25%
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.8.8CVE-2023-3676chainguardaws-efs-csi-driver-fips+11
EPSS score
13.16%
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.8.8CVE-2023-3955chainguardaws-efs-csi-driver+29
EPSS score
4.00%
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.