6.5
Medium
CVE-2025-1767 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other…
Description
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kubelet 1.32 | earliest → 1.32.2 | No fix stated |
Other CVEs of kubelet
The 7 CVEs of kubelet →
CVE-2024-9042
This CVE affects only Windows worker nodes
5.9
Medium
CVE-2025-0426
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the…
6.2
Medium
CVE-2024-10220
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue…
8.1
High
CVE-2023-5528
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows…
7.2
High