← All advisories

High severity8.0NVD Advisory· Published Oct 12, 2023· Updated Jun 17, 2026

CVE-2023-1943

CVE-2023-1943

Description

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
k8s.io/kopsGo	< 1.25.4	1.25.4
k8s.io/kopsGo	>= 1.26.0, < 1.26.2	1.26.2

Affected products

3

Cri O/Operations
cpe:2.3:a:kubernetes:operations:*:*:*:*:*:*:*:*
Range: <1.25.4
ghsa-coords
pkg:golang/k8s.io/kops
Range: < 1.25.4
Kubernetes/kopsv5
Range: 0

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-8gwj-m6vh-2g6jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-1943ghsaADVISORY
github.com/kubernetes/kops/issues/15539nvdIssue TrackingWEB
groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaUnvdMailing ListWEB

News mentions

0

No linked articles in our index yet.