vulnerability

Red Hat: CVE-2024-10220: kubernetes: Arbitrary command execution through gitRepo volume

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:N)
Published
Nov 22, 2024
Added
Jul 9, 2025
Modified
Jul 10, 2025

Description

The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

Solution

no-fix-redhat-rpm-package
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.