Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-5187

Опубликовано: 27 авг. 2025
Источник: nvd
CVSS3: 6.7
EPSS Низкий

Описание

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.

EPSS

Процентиль: 4%
0.0002
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.7
ubuntu
13 дней назад

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.

CVSS3: 6.7
redhat
28 дней назад

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.

CVSS3: 6.7
debian
13 дней назад

A vulnerability exists in the NodeRestriction admission controller in ...

CVSS3: 6.7
github
13 дней назад

Kubernetes Nodes can delete themselves by adding an OwnerReference

EPSS

Процентиль: 4%
0.0002
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-863