Kubernetes Official CVE Feed

VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override

Nodes can bypass dynamic resource allocation authorization checks

ingress-nginx admission controller RCE escalation

ingress-nginx controller configuration injection via unsanitized mirror annotations

ingress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotation

ingress-nginx controller configuration injection via unsanitized auth-url annotation

ingress-nginx controller auth secret file path traversal vulnerability

GitRepo Volume Inadvertent Local Repository Access

Node Denial of Service via kubelet Checkpoint API

Command Injection affecting Windows nodes via nodes/*/logs/query API

Arbitrary command execution through gitRepo volume

VM images built with Image Builder with some providers use default credentials during builds

VM images built with Image Builder and Proxmox provider use default credentials

Ingress-nginx Annotation Validation Bypass

Network restriction bypass via race condition during namespace termination

Incorrect permissions on Windows containers logs

azure-file-csi-driver discloses service account tokens in logs

Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation