Kubernetes

A newly disclosed vulnerability in Kubernetes has been identified that could allow compromised nodes to bypass critical authorization checks within the container orchestration platform. The security flaw, tracked as CVE-2025-4563, affects the NodeRestriction admission controller and poses potential risks for organizations utilizing dynamic resource allocation features in their Kubernetes clusters. The vulnerability allows attackers to create unauthorized mirror pods, enabling privilege escalation attacks. Kubernetes versions 1.32.0-1.32.5 and 1.33.0-1.33.1 are vulnerable. Upgrade immediately to versions 1.32.6 or 1.33.2 to mitigate the risk.

Source: https://cybersecuritynews.com/kubernetes-noderestriction-vulnerability/

TPRM report: https://scoringcyber.rankiteo.com/company/kubernetes

"id": "kub527062525",
"linkid": "kubernetes",
"type": "Vulnerability",
"date": "6/2025",
"severity": "25",
"impact": "",
"explanation": "Attack without any consequences: Attack in which data is not compromised"

{'affected_entities': [{'type': 'Organizations'}],
 'attack_vector': 'Network-based attack vector requiring high privileges for '
                  'exploitation',
 'description': 'A newly disclosed vulnerability in Kubernetes has been '
                'identified that could allow compromised nodes to bypass '
                'critical authorization checks within the container '
                'orchestration platform. The security flaw, tracked as '
                'CVE-2025-4563, affects the NodeRestriction admission '
                'controller and poses potential risks for organizations '
                'utilizing dynamic resource allocation features in their '
                'Kubernetes clusters.',
 'impact': {'systems_affected': 'Kubernetes clusters'},
 'lessons_learned': 'Prioritize upgrading clusters to patched versions, audit '
                    'cluster configurations, implement robust Pod Security '
                    'Standards, and maintain comprehensive audit logging.',
 'motivation': 'Privilege Escalation',
 'post_incident_analysis': {'corrective_actions': ['Upgrade to versions 1.32.6 '
                                                   'or 1.33.2',
                                                   'Audit cluster '
                                                   'configurations',
                                                   'Implement robust Pod '
                                                   'Security Standards',
                                                   'Maintain comprehensive '
                                                   'audit logging'],
                            'root_causes': 'CWE-863 weakness classification '
                                           'related to incorrect authorization '
                                           'implementations'},
 'recommendations': 'Establish regular vulnerability monitoring processes and '
                    'maintain updated cluster deployments to prevent future '
                    'security exposures.',
 'references': [{'source': 'Kubernetes Security Team'}],
 'response': {'remediation_measures': ['Upgrade to versions 1.32.6 or 1.33.2',
                                       'Audit cluster configurations',
                                       'Implement robust Pod Security '
                                       'Standards',
                                       'Maintain comprehensive audit logging']},
 'title': 'Kubernetes NodeRestriction Controller Vulnerability',
 'type': 'Vulnerability',
 'vulnerability_exploited': 'CVE-2025-4563'}