IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
5.8Medium

CVE-2025-13281Portworx Half-Blind SSRF in kube-controller-manager

Kubernetes Kubernetes Published: (11 months ago)

Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Weakness (CWE): CWE-918

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Kubernetes Kubernetes v1.30.0 – ≤ v1.30.14, v1.31.0 – ≤ v1.31.14, v1.32.0 – ≤ v1.32.9, v1.33.0 – ≤ v1.33.5, v1.34.0 – ≤ v1.34.1

References and patches

Recent CVEs in the same product — Kubernetes

2.7Low
CVE-2026-116472

ingress-nginx mirror-target self-DOS

Kubernetes ingress-nginx; SUSE Rancher Prime RKE2 ingress-nginx

A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected…

5.8Medium
CVE-2026-76654

Subpath symlinking on Windows nodes permits NTLM coercion

Kubernetes Kubernetes

An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not reject a target that resolves…

2.7Low
CVE-2026-15687

Path traversal via non-tar copyDirectoryFromPod

Kubernetes kubernetes-client/java

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.