VYPR
← All advisories
High severity7.2NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-5528

CVE-2023-5528

Description

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
k8s.io/kubernetesGo
>= 1.28.0, < 1.28.41.28.4
k8s.io/kubernetesGo
>= 1.27.0, < 1.27.81.27.8
k8s.io/kubernetesGo
>= 1.26.0, < 1.26.111.26.11
k8s.io/kubernetesGo
< 1.25.161.25.16

Affected products

144

Patches

Vulnerability mechanics

References

17

News mentions

0

No linked articles in our index yet.