Skip to content
Sign in
7.2 High

CVE-2023-5528 A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows…

Description

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.

Affected products and versions

Product Affected versions Fixed in
kubelet 1.28 1.28.0 → 1.28.3 1.28.4
kubelet 1.27 1.27.0 → 1.27.7 1.27.8
kubelet 1.26 1.26.0 → 1.26.10 1.26.11
kubelet 1.25 earliest → 1.25.15 1.25.16

Other CVEs of kubelet

The 7 CVEs of kubelet →
CVE-2025-1767 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other… 6.5 Medium CVE-2024-9042 This CVE affects only Windows worker nodes 5.9 Medium CVE-2025-0426 A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the… 6.2 Medium CVE-2024-10220 The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue… 8.1 High
Track this CVE