CVSS 3.1
6.2 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2025-0426
Medium (6.2). EPSS 0.4% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes 1.29.14, 1.30.10, 1.31.6.
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jgfp-53c3-624w | Go | k8s.io/kubernetes | >=1.32.0 <1.32.2 | 1.32.2 |
| GHSA-jgfp-53c3-624w | Go | k8s.io/kubernetes | >=1.31.0 <1.31.6 | 1.31.6 |
| GHSA-jgfp-53c3-624w | Go | k8s.io/kubernetes | >=1.30.0 <1.30.10 | 1.30.10 |
| GHSA-jgfp-53c3-624w | Go | k8s.io/kubernetes | <1.29.14 | 1.29.14 |
| GO-2025-3465 | Go | k8s.io/kubernetes | <1.29.14 >=1.30.0 <1.30.10 >=1.31.0 <1.31.6 >=1.32.0 <1.32.2 | 1.29.14, 1.30.10, 1.31.6, 1.32.2 |