How many CVEs does kubernetes kubelet have?

kubernetes kubelet has 7 published CVE records since 2023.

How many kubernetes kubelet CVEs are in CISA KEV?

None of kubernetes kubelet's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for kubernetes kubelet vulnerabilities?

Yes — 2 of kubernetes kubelet's CVEs have a known public exploit.

Which versions of kubernetes kubelet are affected?

88 distinct kubernetes kubelet versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in kubernetes kubelet CVEs?

kubernetes kubelet's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-400 (Uncontrolled Resource Consumption).

What is the average severity of kubernetes kubelet CVEs?

The average CVSS base score across kubernetes kubelet's scored CVEs is 7.7.

kubernetes kubelet Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every kubernetes kubelet version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= v1.24.162 CVEs
>= v1.24.172 CVEs
>= v1.25.132 CVEs
>= v1.26.82 CVEs
>= v1.27.52 CVEs
>= v1.28.02 CVEs
>= v1.28.12 CVEs
v1.25.0 <= v <= v1.25.122 CVEs
v1.26.0 <= v <= v1.26.72 CVEs
v1.27.0 <= v <= v1.27.42 CVEs
<= 1.24.161 CVE
<= 1.28.111 CVE
<= v1.25.151 CVE
<= v1.29.121 CVE
<= v1.32.21 CVE
>= 1.24.171 CVE
>= 1.25.131 CVE
>= 1.26.81 CVE
>= 1.27.51 CVE
>= 1.28.01 CVE
>= 1.28.11 CVE
>= 1.28.121 CVE
>= 1.29.71 CVE
>= 1.30.101 CVE
>= 1.30.31 CVE
>= 1.31.01 CVE
>= 1.31.61 CVE
>= 1.32.21 CVE
>= v1.25.161 CVE
>= v1.26.111 CVE
>= v1.27.81 CVE
>= v1.28.41 CVE
1.25.0 <= v <= 1.25.121 CVE
1.26.0 <= v <= 1.26.71 CVE
1.27.0 <= v <= 1.27.41 CVE
1.29.0 <= v <= 1.29.61 CVE
1.30.0 <= v <= 1.30.21 CVE
1.30.0 <= v <= 1.30.91 CVE
1.31.0 <= v <= 1.31.51 CVE
1.32.0 <= v <= 1.32.11 CVE
v1.26.0 <= v <= v1.26.101 CVE
v1.27.0 <= v <= v1.27.71 CVE
v1.28.0 <= v <= v1.28.31 CVE
v1.30 <= v <= v1.30.81 CVE
v1.31 <= v <= v1.31.41 CVE
v1.32 <= v <= v1.32.01 CVE

Fixed in

> v1.24.162 CVEs
> v1.25.122 CVEs
> v1.26.72 CVEs
> v1.27.42 CVEs
v1.24.172 CVEs
v1.25.132 CVEs
v1.26.82 CVEs
v1.27.52 CVEs
v1.28.12 CVEs
> 1.24.161 CVE
> 1.25.121 CVE
> 1.26.71 CVE
> 1.27.41 CVE
> 1.28.111 CVE

Find a version

7 CVEs

Sort

Medium vulnerability · 2025-03-13
CVE-2025-1767
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.5% (41th pct)2025-03-13
Medium vulnerability · 2025-03-13
CVE-2024-9042
Patch
CWE-20
Medium · CVSS 5.9
EPSS 1.4% (70th pct)2025-03-13
Medium vulnerability · 2025-02-13
CVE-2025-0426
Patch
CWE-400
Medium · CVSS 6.2
EPSS 0.4% (29th pct)2025-02-13
High vulnerability · 2024-11-22
CVE-2024-10220
Public exploit
Patch
CWE-22
High · CVSS 8.6
EPSS 3.0% (86th pct)2024-11-22
Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation
CVE-2023-5528
Patch
CWE-20
High · CVSS 8.8
EPSS 3.6% (88th pct)2023-11-14
Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation
CVE-2023-3955
Patch
CWE-20
High · CVSS 8.8
EPSS 3.4% (88th pct)2023-10-31
High vulnerability · 2023-10-31
CVE-2023-3676
Public exploit
Patch
CWE-20
High · CVSS 8.8
EPSS 11.7% (96th pct)2023-10-31

kubernetes kubelet Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other kubernetes products

Frequently asked questions

References

Track kubernetes kubelet vulnerabilities