en
Kubernetes is a self-governing, CNCF-hosted open-source project for cloud-native container orchestration. It automates deployment, scaling, and management of containerized applications, and is supported by a global ecosystem of contributors, tools, services, and adopters.
As of 11/13/2026, Kubernetes recorded 4 security vulnerabilities in the last 90 days across 2 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Kubernetes had the most security vulnerabilities in the Kubernetes ecosystem, with 3 vulnerabilities—approximately 75% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-116472ingress-nginx mirror-target self-DOSCVE-2026-76654Subpath symlinking on Windows nodes permits NTLM coercionCVE-2026-2270StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationCVE-2026-19444Kubernetes kubectl cp path traversal enables arbitrary local file writes on WindowsCVE-2026-15687Path traversal via non-tar copyDirectoryFromPod| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-116472ingress-nginx mirror-target self-DOS | Exploitation statusNot confirmed | FixYes |
| Published11/05/2026 |
| SeverityLow |
CVE-2026-76654Subpath symlinking on Windows nodes permits NTLM coercion | Exploitation statusNot confirmed | FixYes | Affected productKubernetes | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-2270StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-19444Kubernetes kubectl cp path traversal enables arbitrary local file writes on Windows | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published09/28/2026 | SeverityMedium |
|---|
CVE-2026-15687Path traversal via non-tar copyDirectoryFromPod | Exploitation statusNot exploited | FixYes | Affected productkubernetes-client/java | Published07/23/2026 | SeverityLow |
|---|
CVE-2026-3864CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server | Exploitation statusNot exploited | FixYes | Affected productCSI Driver for NFS | Published03/20/2026 | SeverityMedium |
|---|
CVE-2026-4342ingress-nginx comment-based nginx configuration injection | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published03/19/2026 | SeverityHigh |
|---|
CVE-2026-3288Kubernetes ingress-nginx rewrite-target configuration injection enables controller code execution | Exploitation statusActively exploited | FixYes | Affected productingress-nginx | Published03/09/2026 | SeverityHigh |
|---|
CVE-2025-15566ingress-nginx auth-proxy-set-headers nginx configuration injection | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published02/06/2026 | SeverityHigh |
|---|
CVE-2026-24514ingress-nginx Admission Controller denial of service | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published02/03/2026 | SeverityMedium |
|---|
CVE-2026-24513ingress-nginx auth-url protection bypass | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published02/03/2026 | SeverityLow |
|---|
CVE-2026-24512ingress-nginx auth-method nginx configuration injection | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published02/03/2026 | SeverityHigh |
|---|
CVE-2026-1580ingress-nginx auth-method nginx configuration injection | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published02/03/2026 | SeverityHigh |
|---|
CVE-2025-13281Kubernetes kube-controller-manager Portworx SSRF enables control-plane data disclosure | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published12/14/2025 | SeverityMedium |
|---|
CVE-2025-9708Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks | Exploitation statusNot exploited | FixYes | Affected productKubernetes CSharp Client | Published09/16/2025 | SeverityMedium |
|---|
CVE-2025-7445Kubernetes secrets-store-sync-controller discloses service account tokens in logs | Exploitation statusNot exploited | FixYes | Affected productsecrets-store-sync-controller | Published09/05/2025 | SeverityMedium |
|---|
CVE-2025-5187Nodes can delete themselves by adding an OwnerReference | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published08/27/2025 | SeverityMedium |
|---|
CVE-2025-7342VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override | Exploitation statusNot exploited | FixYes | Affected productImage Builder | Published08/17/2025 | SeverityHigh |
|---|
CVE-2025-4563Nodes can bypass dynamic resource allocation authorization checks | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published06/23/2025 | SeverityLow |
|---|
CVE-2025-24514ingress-nginx controller - configuration injection via unsanitized auth-url annotation | Exploitation statusActively exploited | FixYes | Affected productingress-nginx | Published03/24/2025 | SeverityHigh |
|---|
CVE-2025-24513ingress-nginx controller - auth secret file path traversal vulnerability | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published03/24/2025 | SeverityMedium |
|---|
CVE-2025-1974ingress-nginx admission controller RCE escalation | Exploitation statusActively exploited | FixYes | Affected productingress-nginx | Published03/24/2025 | SeverityCritical |
|---|
CVE-2025-1098ingress-nginx controller - configuration injection via unsanitized mirror annotations | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published03/24/2025 | SeverityHigh |
|---|
CVE-2025-1097ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation | Exploitation statusActively exploited | FixYes | Affected productingress-nginx | Published03/24/2025 | SeverityHigh |
|---|
CVE-2024-7598Kubernetes kube-apiserver NetworkPolicy bypass via race condition during namespace deletion | Exploitation statusNot exploited | FixYes | Affected productkube-apiserver | Published03/20/2025 | SeverityLow |
|---|
CVE-2025-1767CVE-2025-1767 | Exploitation statusNot exploited | FixNo | Affected productkubelet | Published03/13/2025 | SeverityMedium |
|---|
CVE-2024-9042CVE-2024-9042 | Exploitation statusNot exploited | FixYes | Affected productkubelet | Published03/13/2025 | SeverityMedium |
|---|
CVE-2025-0426CVE-2025-0426 | Exploitation statusNot exploited | FixYes | Affected productkubelet | Published02/13/2025 | SeverityMedium |
|---|
CVE-2024-10220Arbitrary command execution through gitRepo volume | Exploitation statusNot exploited | FixYes | Affected productkubelet | Published11/22/2024 | SeverityHigh |
|---|
CVE-2024-9594VM images built with Image Builder with some providers use default credentials during builds | Exploitation statusNot exploited | FixYes | Affected productImage Builder | Published10/15/2024 | SeverityMedium |
|---|
CVE-2024-9486VM images built with Image Builder and Proxmox provider use default credentials | Exploitation statusNot exploited | FixYes | Affected productImage Builder | Published10/15/2024 | SeverityCritical |
|---|
CVE-2024-7646CVE-2024-7646 | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published08/16/2024 | SeverityHigh |
|---|
CVE-2024-5321Incorrect permissions on Windows containers logs | Exploitation statusNot exploited | FixNo | Affected productKubernetes | Published07/18/2024 | SeverityMedium |
|---|
CVE-2024-3744Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs | Exploitation statusNot exploited | FixYes | Affected productazure-file-csi-driver | Published05/15/2024 | SeverityMedium |
|---|
CVE-2024-3177Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published04/22/2024 | SeverityLow |
|---|
CVE-2023-5528Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation | Exploitation statusActively exploited | FixNo | Affected productkubelet | Published11/14/2023 | SeverityHigh |
|---|
CVE-2023-3893Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation | Exploitation statusNot confirmed | FixYes | Affected productcsi-proxy | Published11/03/2023 | SeverityHigh |
|---|
CVE-2022-3172Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) | Exploitation statusNot confirmed | FixYes | Affected productkube-apiserver | Published11/03/2023 | SeverityMedium |
|---|
CVE-2023-3955Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | Exploitation statusNot exploited | FixYes | Affected productkubelet | Published10/31/2023 | SeverityHigh |
|---|
CVE-2023-3676Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | Exploitation statusActively exploited | FixYes | Affected productkubelet | Published10/31/2023 | SeverityHigh |
|---|
CVE-2021-25736Windows kube-proxy LoadBalancer contention | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published10/30/2023 | SeverityMedium |
|---|
CVE-2023-5044Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published10/25/2023 | SeverityHigh |
|---|
CVE-2023-5043Ingress nginx annotation injection causes arbitrary command execution | Exploitation statusNot confirmed | FixYes | Affected productingress-nginx | Published10/25/2023 | SeverityHigh |
|---|
CVE-2022-4886Ingress-nginx `path` sanitization can be bypassed with `log_format` directive | Exploitation statusNot exploited | FixYes | Affected productingress-nginx | Published10/25/2023 | SeverityHigh |
|---|
CVE-2023-1943Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode | Exploitation statusNot exploited | FixYes | Affected productkops | Published10/11/2023 | SeverityHigh |
|---|
CVE-2023-2728Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published07/03/2023 | SeverityMedium |
|---|
CVE-2023-2727Bypassing policies imposed by the ImagePolicyWebhook admission plugin | Exploitation statusNot exploited | FixYes | Affected productKubernetes | Published07/03/2023 | SeverityMedium |
|---|
CVE-2023-2431Bypass of seccomp profile enforcement | Exploitation statusActively exploited | FixYes | Affected productKubernetes | Published06/16/2023 | SeverityLow |
|---|
CVE-2023-2878Kubernetes secrets-store-csi-driver discloses service account tokens in logs | Exploitation statusActively exploited | FixYes | Affected productsecrets-store-csi-driver | Published06/07/2023 | SeverityMedium |
|---|
CVE-2023-1944[minikube] ssh server with default password | Exploitation statusNot exploited | FixYes | Affected productMinikube | Published05/24/2023 | SeverityHigh |
|---|
107 Results | Page 1 of 3