CVE-2025-1767

MEDIUM EPSS 40.0%
Published Mar 13, 20251y ago · Modified Jun 17, 20262w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Mar 13, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.

CVSS Details

Base Score
6.5
Exploitability
1.2
Impact
5.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability None

Threat Intelligence

EPSS Exploit Probability
40.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

References 3

  • openwall.com http://www.openwall.com/lists/oss-security/2025/03/13/9
  • github.com https://github.com/kubernetes/kubernetes/pull/130786
  • groups.google.com https://groups.google.com/g/kubernetes-security-announce/c/19irihsKg7s

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.