openkruise

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

openkruise records in CISA KEV

No openkruise vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kruise 2 records HIGH

Records

3 records

TI-2026-19344 CVE-2026-24005 · GHSA-9fj4-3849-rv9g

OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field

HIGH 66

Kruise provides automated management of large-scale applications on Kubernetes.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00332 Published 2026-02-25 Fixed in 1.8.3, 1.7.5 CWE-918

TI-2026-83932 CVE-2026-120656 · GHSA-hfc3-r2m8-qf97

Unauthenticated pprof endpoint in OpenKruise kruise-manager

LOW 38

OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any pod on the cluster network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2026-11-02 Fixed in 1.9.2 CWE-400

TI-2023-14433 CVE-2023-30617 · GHSA-437m-7hj5-9mpw

Leverage the kruise-daemon pod to list all secrets in the entire cluster

LOW 31

Kruise provides automated management of large-scale applications on Kubernetes.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00489 Published 2024-01-03 Fixed in 1.3.1, 1.5.2 +1 CWE-250

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0