CVE-2024-10220

Summary

CVE-2024-10220 is a critical vulnerability affecting the Kubernetes kubelet component. Maliciously crafted gitRepo volumes can be used to execute arbitrary commands on the host system. This issue poses a significant risk, particularly for versions of kubelet from 1.28.11 to 1.29.6, and from 1.30.0 to 1.30.2. Successful exploitation of this vulnerability could lead to unauthorized system access and potential data breaches. It is recommended that affected systems be patched as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.