VDB
GO-2025-3521
GO-2025-3521
PUBLISHED
Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | cluster-autoscaler-fips-1.32 | *, *, * |
| wolfi | pulumi-kubernetes-operator | *, *, * |
| wolfi | cluster-autoscaler-1.34 | *, *, * |
| chainguard | eks-distro-1.36 | *, *, * |
| chainguard | longhorn-share-manager-fips-1.10 | *, *, * |
| chainguard | blob-csi-1.26 | *, *, * |
| wolfi | azurefile-csi-1.35 | *, *, * |
| wolfi | cloud-provider-gcp-cloud-controller-manager | *, *, * |
| chainguard | azurefile-csi-1.30 | *, *, * |
| chainguard | azurefile-csi-fips-1.30 | *, *, * |
| chainguard | rke2-runtime-fips-1.32 | *, *, * |
| chainguard | azuredisk-csi-fips-1.33 | *, *, * |
| chainguard | aws-ebs-csi-driver | *, *, * |
| wolfi | kubernetes-1.34 | *, *, * |
| chainguard | spark-operator | *, *, * |
| wolfi | rancher-agent-2.13 | *, *, * |
| chainguard | rancher-webhook-0.9 | *, *, * |
| wolfi | rancher-system-agent | *, *, * |
| chainguard | cephcsi | *, *, * |
| chainguard | argo-rollouts-fips | *, *, * |
…and 228 more
Timeline
- Mar 25, 2025 CVE Published
- Feb 4, 2026 CVE Updated