VYPR
← All advisories
High severityNVD Advisory· Published Nov 14, 2023· Updated Feb 25, 2026

Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation

CVE-2023-5528

Description

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
k8s.io/kubernetesGo
>= 1.28.0, < 1.28.41.28.4
k8s.io/kubernetesGo
>= 1.27.0, < 1.27.81.27.8
k8s.io/kubernetesGo
>= 1.26.0, < 1.26.111.26.11
k8s.io/kubernetesGo
< 1.25.161.25.16

Affected products

144

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.