Low severity2.7NVD Advisory· Published Sep 6, 2021· Updated Jun 17, 2026
CVE-2021-25737
CVE-2021-25737
Description
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
k8s.io/kubernetesGo | >= 1.16.0, < 1.18.19 | 1.18.19 |
k8s.io/kubernetesGo | >= 1.19.0, < 1.19.11 | 1.19.11 |
k8s.io/kubernetesGo | >= 1.20.0, < 1.20.7 | 1.20.7 |
k8s.io/kubernetesGo | >= 1.21.0, < 1.21.1 | 1.21.1 |
Affected products
5cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*range: >=1.16.0,<1.18.19
- cpe:2.3:a:kubernetes:kubernetes:1.21.0:-:*:*:*:*:*:*
- (no CPE)range: unspecified
- ghsa-coords2 versions
>= 1.16.0, < 1.18.19+ 1 more
- (no CPE)range: >= 1.16.0, < 1.18.19
- (no CPE)range: < 0.0.20250807T150727-1.1
Patches
Vulnerability mechanics
References
6- github.com/kubernetes/kubernetes/issues/102106nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-mfv7-gq43-w965ghsaADVISORY
- groups.google.com/g/kubernetes-security-announce/c/xAiN3924thYnvdMailing ListThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-25737ghsaADVISORY
- security.netapp.com/advisory/ntap-20211004-0004/nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20211004-0004ghsaWEB
News mentions
0No linked articles in our index yet.