Kubernetes vulnerabilities
We track 28 vulnerabilities in Kubernetes products across 12 products. 28 are rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2026.
Latest Kubernetes vulnerabilities
- 8.8 High severity
A security issue was discovered in ingress-nginx where a combination of Ingress annotations…
A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets acce
- 8.8 High severity
A security issue was discovered in ingress-nginx where the…
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller,
- 8.8 High severity
A security issue was discovered in ingress-nginx where the…
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx con
- 8.8 High severity
A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress…
A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets
- 8.8 High severity
A security issue was discovered in ingress-nginx where the…
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, an
- 7.5 High severity
Image Builder: Use of Hard-coded Credentials
A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclus
- 8.8 High severity
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx…
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx c
- 9.8 Critical severity
ingress-nginx: Improper Isolation or Compartmentalization
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets
- 8.8 High severity
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx…
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in
- 8.8 High severity
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx…
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingres
- 8.1 High severity
kubelet: Improper Limitation of a Pathname to a Restricted Directory
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.
- 8.8 High severity
devtron: Improper Neutralization of Special Elements used in an SQL Command
devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/u
- 8.3 High severity
apiserver: Improper Neutralization of Script-Related HTML Tags in a Web Page
A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in the API Server's public API endpoint can be exploited, allowing an attacker to execute arbitrary JavaScript code in the victim browser
- 8.1 High severity
Image Builder: Use of Hard-coded Credentials
A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The cr
- 9.8 Critical severity
Image Builder: Use of Hard-coded Credentials
A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and node
- 8.8 High severity
A security issue was discovered in ingress-nginx where an actor with permission to create…
A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ing
- 8.1 High severity
Red Hat OpenShift Container Platform 4.12: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.
- 8.8 High severity
A security issue was discovered in Kubernetes where a user that can create pods and persistent…
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugi
- 8.2 High severity
kube-apiserver: Server-Side Request Forgery
A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties
- 8.8 High severity
A security issue was discovered in Kubernetes where a user that can create pods on Windows…
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes runnin
- 8.8 High severity
A security issue was discovered in Kubernetes where a user that can create pods on Windows…
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.
- 8.8 High severity
A security issue was discovered in Kubernetes where a user that can create pods on Windows…
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.
- 7.5 High severity
kubernetes: Incorrect Authorization
A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied.
- 7.8 High severity
Red Hat OpenShift Container Platform 4.11: Improper Control of Dynamically-Managed Code Resources
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
- 8.0 High severity
Red Hat OpenShift Container Platform 4.10: Authentication Bypass Using an Alternate Path or Channel
An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would th
- 9.8 Critical severity
minikube: Incorrect Privilege Assignment
This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.
- 8.8 High severity
Users may have access to secure endpoints in the control plane network.
Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserve
- 8.8 High severity
A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity…
A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.