CVE-2025-1767Patch

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-1767

Full discourse1 post

Doctor Kloud@doctorkloud212d
Patch
#CVE-2025-1767 : le volume gitRepo Kubernetes permet l'escalade via les pods d'un même nœud. Fonctionnalité dépréciée, zéro correctif prévu upstream. Si vous l'utilisez encore, vous êtes exposés définitivement. Migrez vers des init containers ou des solutions CSI. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-1767
Post summary
The advisory highlights that Kubernetes’ deprecated gitRepo volume can lead to privilege escalation on the same node, and with no upstream fix available, users should migrate to init containers or CSI solutions.
0000093
13 followersView on X

Explore more

Back to dashboard