VDB
CISA-2025-1767
CISA-2025-1767
PUBLISHED
CVSS 6.5 MEDIUM
Reported by kubernetes · Published March 13, 2025
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kubernetes | Kubelet | <=v1.32.2 |
| Kubernetes | Kubelet | *, <=v1.32.2 |
Timeline
- Mar 13, 2025 CVE Published
- Mar 17, 2025 CVE Updated