CVE-2024-9042

MEDIUM

Kubernetes Kubelet < 1.29.13, 1.30.0-1.30.7, 1.31.0-1.31.3, 1.32.0 - Improper Input Validation

Title source: llm

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

Core 3

Core References

Mailing List

Mailing List

Issue Tracking

CVSS v3 5.9

EPSS 0.0139

EPSS Percentile 68.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-20

Status published

Products (5)

k8s.io/kubernetes 0 - 1.29.13Go

Kubernetes/Kubelet <=v1.29.12

Kubernetes/Kubelet v1.30 - v1.30.8

Kubernetes/Kubelet v1.31 - v1.31.4

Kubernetes/Kubelet v1.32 - v1.32.0

Published Mar 13, 2025

Tracked Since Feb 18, 2026