CVE-2025-1767: kubernetes kubelet Improper Input Validation

CVSS: 6.5v3.1MediumDeferred

AliasesDEBIAN-CVE-2025-1767CGA-2299-cx6g-qvcxCGA-26f4-wg79-p99j+1502 more

Published 13-03-2025Last modified 17-03-2025

Vulnerability summary

CVE-2025-1767 is a medium (CVSS 6.5) Improper Input Validation vulnerability in kubernetes kubelet. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.4% of scored vulnerabilities.

Overall risk

26/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.70%

0%100%

Low · +0.15 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 11

OPENSUSE-SU-2025:14937-1 CGA-2JMW-53M7-X4C4 CGA-353R-6WQW-CPM3 CGA-5F4W-F9M2-HXRH CGA-6J52-PGHC-M25C CGA-6R94-FG49-6632+5 more

Timeline

13-03-2025
PublishedVulnerability first disclosed.
17-03-2025
Last modifiedVulnerability information updated.

Description

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.

CVSS metrics

6 scores · 6 sources · 1 version

v3.16.5

EPSS trend

Probability

0.70%

Chance of exploitation in the next 30 days

Percentile

52%

Versus all other CVEs

30-day change

+0.15 pp

From 0.55% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Chainguard200 products

argo-cd-2.11All versions (No fix recorded)
argo-cd-2.13All versions (No fix recorded)
argo-cd-2.13-compatAll versions (No fix recorded)
argo-cd-2.13-repo-serverAll versions (No fix recorded)
argo-cd-2.14All versions (No fix recorded)

argo-cd-2.14-compatAll versions (No fix recorded)
argo-cd-2.14-repo-serverAll versions (No fix recorded)
argo-cd-3.0All versions (No fix recorded)
argo-cd-3.0-compatAll versions (No fix recorded)
argo-cd-3.0-iamguarded-compatAll versions (No fix recorded)
argo-cd-3.0-repo-serverAll versions (No fix recorded)
argo-cd-3.1All versions (No fix recorded)
argo-cd-3.1-compatAll versions (No fix recorded)
argo-cd-3.2All versions (No fix recorded)
argo-cd-3.2-compatAll versions (No fix recorded)
argo-cd-3.3All versions (No fix recorded)
argo-cd-3.3-compatAll versions (No fix recorded)
argo-cd-3.4All versions (No fix recorded)
argo-cd-3.4-compatAll versions (No fix recorded)
argo-cd-fips-2.14All versions (No fix recorded)
argo-cd-fips-2.14-compatAll versions (No fix recorded)
argo-cd-fips-2.14-repo-serverAll versions (No fix recorded)
argo-cd-fips-3.0All versions (No fix recorded)
argo-cd-fips-3.0-compatAll versions (No fix recorded)
argo-cd-fips-3.0-iamguarded-compatAll versions (No fix recorded)
argo-cd-fips-3.0-repo-serverAll versions (No fix recorded)
argo-cd-fips-3.1< 3.1.16-r1
argo-cd-fips-3.1-compat< 3.1.16-r1
argo-cd-fips-3.2All versions (No fix recorded)
argo-cd-fips-3.2-compatAll versions (No fix recorded)
argo-cd-fips-3.3All versions (No fix recorded)
argo-cd-fips-3.3-compatAll versions (No fix recorded)
argo-cd-fips-3.4All versions (No fix recorded)
argo-cd-fips-3.4-compatAll versions (No fix recorded)
argo-rolloutsAll versions (No fix recorded)
argo-rollouts-fipsAll versions (No fix recorded)
argocd-image-updaterAll versions (No fix recorded)
argocd-image-updater-compatAll versions (No fix recorded)
argocd-image-updater-fipsAll versions (No fix recorded)
aws-ebs-csi-driverAll versions (No fix recorded)
aws-efs-csi-driverAll versions (No fix recorded)
aws-efs-csi-driver-fipsAll versions (No fix recorded)
azure-vnet-cni< 1.7.9-r0
azuredisk-csi-1.28All versions (No fix recorded)
azuredisk-csi-1.28-compatAll versions (No fix recorded)
azuredisk-csi-1.29All versions (No fix recorded)
azuredisk-csi-1.29-compatAll versions (No fix recorded)
azuredisk-csi-1.30All versions (No fix recorded)
azuredisk-csi-1.30-compatAll versions (No fix recorded)
azuredisk-csi-1.31All versions (No fix recorded)
azuredisk-csi-1.31-compatAll versions (No fix recorded)
azuredisk-csi-1.32All versions (No fix recorded)
azuredisk-csi-1.33All versions (No fix recorded)
azuredisk-csi-1.34All versions (No fix recorded)
azuredisk-csi-fips-1.28All versions (No fix recorded)
azuredisk-csi-fips-1.29All versions (No fix recorded)
azuredisk-csi-fips-1.30All versions (No fix recorded)
azuredisk-csi-fips-1.31All versions (No fix recorded)
azuredisk-csi-fips-1.32All versions (No fix recorded)
azuredisk-csi-fips-1.33All versions (No fix recorded)
azuredisk-csi-fips-1.34All versions (No fix recorded)
azurefile-csi-1.29All versions (No fix recorded)
azurefile-csi-1.29-compatAll versions (No fix recorded)
azurefile-csi-1.30All versions (No fix recorded)
azurefile-csi-1.30-compatAll versions (No fix recorded)
azurefile-csi-1.31All versions (No fix recorded)
azurefile-csi-1.31-compatAll versions (No fix recorded)
azurefile-csi-1.32All versions (No fix recorded)
azurefile-csi-1.32-compatAll versions (No fix recorded)
azurefile-csi-1.33< 1.33.2-r1 | All versions (No fix recorded)
azurefile-csi-1.33-compat< 1.33.2-r1
azurefile-csi-1.34All versions (No fix recorded)
azurefile-csi-1.35All versions (No fix recorded)
azurefile-csi-fips-1.29All versions (No fix recorded)
azurefile-csi-fips-1.29-compatAll versions (No fix recorded)
azurefile-csi-fips-1.30All versions (No fix recorded)
azurefile-csi-fips-1.30-compatAll versions (No fix recorded)
azurefile-csi-fips-1.31All versions (No fix recorded)
azurefile-csi-fips-1.31-compatAll versions (No fix recorded)
azurefile-csi-fips-1.32All versions (No fix recorded)
azurefile-csi-fips-1.32-compatAll versions (No fix recorded)
azurefile-csi-fips-1.33All versions (No fix recorded)
azurefile-csi-fips-1.34All versions (No fix recorded)
azurefile-csi-fips-1.35All versions (No fix recorded)
blob-csi-1.23All versions (No fix recorded)
blob-csi-1.23-compatAll versions (No fix recorded)
blob-csi-1.24All versions (No fix recorded)
blob-csi-1.24-compatAll versions (No fix recorded)
blob-csi-1.25All versions (No fix recorded)
blob-csi-1.25-compatAll versions (No fix recorded)
blob-csi-1.26All versions (No fix recorded)
blob-csi-1.26-compatAll versions (No fix recorded)
blob-csi-1.27All versions (No fix recorded)
blob-csi-fips-1.23All versions (No fix recorded)
blob-csi-fips-1.23-compatAll versions (No fix recorded)
blob-csi-fips-1.24All versions (No fix recorded)
blob-csi-fips-1.24-compatAll versions (No fix recorded)
blob-csi-fips-1.25All versions (No fix recorded)
blob-csi-fips-1.25-compatAll versions (No fix recorded)
blob-csi-fips-1.26All versions (No fix recorded)
blob-csi-fips-1.26-compatAll versions (No fix recorded)
blob-csi-fips-1.27All versions (No fix recorded)
calico-3.29All versions (No fix recorded)
calico-apiserver-3.29All versions (No fix recorded)
calico-apiserver-3.30All versions (No fix recorded)
calico-apiserver-3.31All versions (No fix recorded)
calico-apiserver-3.32All versions (No fix recorded)
calico-apiserver-compat-3.29All versions (No fix recorded)
calico-apiserver-fips-3.29All versions (No fix recorded)
calico-apiserver-fips-3.30All versions (No fix recorded)
calico-apiserver-fips-3.31All versions (No fix recorded)
calico-apiserver-fips-3.32All versions (No fix recorded)
calico-app-policy-3.29All versions (No fix recorded)
calico-app-policy-3.30All versions (No fix recorded)
calico-app-policy-3.31All versions (No fix recorded)
calico-app-policy-3.32All versions (No fix recorded)
calico-app-policy-fips-3.29All versions (No fix recorded)
calico-app-policy-fips-3.30All versions (No fix recorded)
calico-app-policy-fips-3.31All versions (No fix recorded)
calico-app-policy-fips-3.32All versions (No fix recorded)
calico-cni-3.29All versions (No fix recorded)
calico-cni-compat-3.29All versions (No fix recorded)
calico-cni-compat-fips-3.29All versions (No fix recorded)
calico-cni-fips-3.29All versions (No fix recorded)
calico-felix-3.29All versions (No fix recorded)
calico-felix-3.30< 3.30.7-r13 | All versions (No fix recorded)
calico-felix-3.31All versions (No fix recorded)
calico-felix-3.32All versions (No fix recorded)
calico-felix-fips-3.29All versions (No fix recorded)
calico-felix-fips-3.30All versions (No fix recorded) | < 3.30.7-r11
calico-felix-fips-3.31All versions (No fix recorded)
calico-felix-fips-3.32All versions (No fix recorded)
calico-fips-3.29All versions (No fix recorded)
calico-goldmane-3.30All versions (No fix recorded) | < 3.30.7-r13
calico-goldmane-3.31All versions (No fix recorded)
calico-goldmane-3.32All versions (No fix recorded)
calico-goldmane-fips-3.30All versions (No fix recorded) | < 3.30.7-r11
calico-goldmane-fips-3.31All versions (No fix recorded)
calico-goldmane-fips-3.32All versions (No fix recorded)
calico-key-cert-provisioner-3.29All versions (No fix recorded)
calico-key-cert-provisioner-fips-3.29All versions (No fix recorded)
calico-kube-controllers-3.29All versions (No fix recorded)
calico-kube-controllers-fips-3.29All versions (No fix recorded)
calico-node-3.29All versions (No fix recorded)
calico-node-3.30All versions (No fix recorded)
calico-node-3.31All versions (No fix recorded)
calico-node-3.32All versions (No fix recorded)
calico-node-fips-3.29All versions (No fix recorded)
calico-node-fips-3.30All versions (No fix recorded)
calico-node-fips-3.31All versions (No fix recorded)
calico-node-fips-3.32All versions (No fix recorded)
calico-pod2daemon-3.29All versions (No fix recorded)
calico-pod2daemon-fips-3.29All versions (No fix recorded)
calico-pod2daemon-flexvol-compat-3.29All versions (No fix recorded)
calico-typha-client-3.29All versions (No fix recorded)
calico-typha-client-fips-3.29All versions (No fix recorded)
calico-typhad-3.29All versions (No fix recorded)
calico-typhad-fips-3.29All versions (No fix recorded)
calico-whisker-backend-3.30All versions (No fix recorded)
calico-whisker-backend-3.31All versions (No fix recorded)
calico-whisker-backend-3.32All versions (No fix recorded)
calico-whisker-backend-fips-3.30All versions (No fix recorded)
calico-whisker-backend-fips-3.31All versions (No fix recorded)
calico-whisker-backend-fips-3.32All versions (No fix recorded)
calicoctl-3.29All versions (No fix recorded)
calicoctl-fips-3.29All versions (No fix recorded)
cephcsiAll versions (No fix recorded)
cephcsi-fipsAll versions (No fix recorded)
cloud-provider-gcp-cloud-controller-managerAll versions (No fix recorded)
cloud-provider-gcp-cloud-controller-manager-fipsAll versions (No fix recorded)
cluster-autoscaler-1.31All versions (No fix recorded)
cluster-autoscaler-1.31-compatAll versions (No fix recorded)
cluster-autoscaler-1.32All versions (No fix recorded)
cluster-autoscaler-1.32-compatAll versions (No fix recorded)
cluster-autoscaler-1.33All versions (No fix recorded)
cluster-autoscaler-1.34All versions (No fix recorded)
cluster-autoscaler-1.35All versions (No fix recorded)
cluster-autoscaler-fips-1.31All versions (No fix recorded)
cluster-autoscaler-fips-1.31-compatAll versions (No fix recorded)
cluster-autoscaler-fips-1.32All versions (No fix recorded)
cluster-autoscaler-fips-1.32-compatAll versions (No fix recorded)
cluster-autoscaler-fips-1.33All versions (No fix recorded)
cluster-autoscaler-fips-1.34All versions (No fix recorded)
cluster-autoscaler-fips-1.35All versions (No fix recorded)
docker-machine-driver-harvesterAll versions (No fix recorded)
eks-distro-kube-apiserver-1.29All versions (No fix recorded)
eks-distro-kube-apiserver-1.30All versions (No fix recorded)
eks-distro-kube-apiserver-1.31All versions (No fix recorded)
eks-distro-kube-apiserver-1.32All versions (No fix recorded)
eks-distro-kube-apiserver-1.33All versions (No fix recorded)
eks-distro-kube-apiserver-1.34All versions (No fix recorded)
eks-distro-kube-apiserver-1.35All versions (No fix recorded)
eks-distro-kube-apiserver-1.36All versions (No fix recorded)
eks-distro-kube-apiserver-fips-1.29All versions (No fix recorded)
eks-distro-kube-apiserver-fips-1.30All versions (No fix recorded)
eks-distro-kube-apiserver-fips-1.31All versions (No fix recorded)
eks-distro-kube-apiserver-fips-1.32All versions (No fix recorded)
eks-distro-kube-apiserver-fips-1.33All versions (No fix recorded)
eks-distro-kube-apiserver-fips-1.34All versions (No fix recorded)
eks-distro-kube-apiserver-fips-1.35All versions (No fix recorded)

Show all 200

1 vendor · 200 products · Showing 200 of 722. Use Open JSON for the complete list.

References

12 links

Show all 12 references

lists.opensuse.org/archives/…Advisory
lists.opensuse.org/archives/…Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities