cve.bz

CVE-2025-1767

6.5 mediumEPSS 0.7%

Medium (6.5). EPSS 0.7% chance of exploitation in the next 30 days.

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS
0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE
CWE-20
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-3wgm-2gw2-vh5mGok8s.io/kubernetes<=1.32.3no fix published
GO-2025-3521Gok8s.io/kubernetesall versionsno fix published

References

Check your stackJSON