Skip to content
Sign in
8.1 High

CVE-2024-10220 The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue…

Description

The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

Affected products and versions

Product Affected versions Fixed in
kubelet 1.31 earliest → < 1.31.0 1.31.0
kubelet 1.30 1.30.0 → 1.30.2 1.30.3
kubelet 1.29 1.29.0 → 1.29.6 1.29.7
kubelet 1.28 earliest → 1.28.11 1.28.12

Other CVEs of kubelet

The 7 CVEs of kubelet →
CVE-2025-1767 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other… 6.5 Medium CVE-2024-9042 This CVE affects only Windows worker nodes 5.9 Medium CVE-2025-0426 A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the… 6.2 Medium CVE-2023-5528 A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows… 7.2 High
Track this CVE