CVE-2025-0426

CVSS 3.1 Score 6.2 of 10 (medium)

Details

Published Feb 13, 2025
CWE ID 400

Summary

CVE-2025-0426 is a newly identified vulnerability affecting Kubernetes. This issue permits an attacker to send a large number of container checkpoint requests to the unauthenticated kubelet read-only HTTP endpoint, leading to a Node Denial of Service (DoS). The repeated requests consume the Node's disk capacity, causing it to become unresponsive and potentially causing service disruptions. This vulnerability highlights the importance of securing Kubernetes endpoints and monitoring for excessive resource usage.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share