Kubernetes vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-4342 A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.High 8.8 · Mar 19, 2026
• CVE-2026-3288 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration iHigh 8.8 · Mar 9, 2026
• CVE-2025-15566 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuHigh 8.8 · Feb 5, 2026
• CVE-2026-24512 A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx.High 8.8 · Feb 3, 2026
• CVE-2026-1580 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration intoHigh 8.8 · Feb 3, 2026
• CVE-2025-7342 A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the NutaHigh 7.5 · Aug 17, 2025
• CVE-2025-24514 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject conHigh 8.8 · Mar 24, 2025
• CVE-2025-1974 A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary cCritical 9.8 · Mar 24, 2025
• CVE-2025-1098 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations cHigh 8.8 · Mar 24, 2025
• CVE-2025-1097 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to iHigh 8.8 · Mar 24, 2025
• CVE-2024-10220 The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29High 8.1 · Nov 22, 2024
• CVE-2024-9486 A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process.Critical 9.8 · Oct 15, 2024
• CVE-2024-7646 A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group)High 8.8 · Aug 16, 2024
• CVE-2023-5528 A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileHigh 7.2 · Nov 14, 2023
• CVE-2023-3893 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to adminHigh 8.8 · Nov 3, 2023
• CVE-2023-3955 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes.High 8.8 · Oct 31, 2023
• CVE-2023-3676 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes.High 8.8 · Oct 31, 2023
• CVE-2023-5044 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.High 7.6 · Oct 25, 2023
• CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution.High 7.6 · Oct 25, 2023
• CVE-2022-4886 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.High 8.8 · Oct 25, 2023
• CVE-2023-1943 Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.High 8 · Oct 11, 2023
• CVE-2023-1944 This vulnerability enables ssh access to minikube container using a default password.High 8.4 · May 24, 2023
• CVE-2023-1174 This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.Critical 9.8 · May 24, 2023
• CVE-2021-25749 Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.High 7.8 · May 24, 2023
• CVE-2021-25748 A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization oHigh 7.6 · May 24, 2023