Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Den

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes kubelet

Default version status: unaffected

  • 1.32.0 to ≤ 1.32.1affected
  • 1.31.0 to ≤ 1.31.5affected
  • 1.30.0 to ≤ 1.30.9affected
  • 1.32.2unaffected
  • 1.31.6unaffected
  • 1.30.10unaffected

References