Vulnerabilities

TI-2026-83932 CVE-2026-120656 · GHSA-hfc3-r2m8-qf97

Unauthenticated pprof endpoint in OpenKruise kruise-manager

LOW 38

OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any pod on the cluster network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2026-11-02 Fixed in 1.9.2 CWE-400

TI-2026-19344 CVE-2026-24005 · GHSA-9fj4-3849-rv9g

OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field

HIGH 66

Kruise provides automated management of large-scale applications on Kubernetes.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00332 Published 2026-02-25 Fixed in 1.8.3, 1.7.5 CWE-918

TI-2023-14433 CVE-2023-30617 · GHSA-437m-7hj5-9mpw

Leverage the kruise-daemon pod to list all secrets in the entire cluster

LOW 31

Kruise provides automated management of large-scale applications on Kubernetes.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00489 Published 2024-01-03 Fixed in 1.3.1, 1.5.2 +1 CWE-250

Vulnerabilities

Filters

Unauthenticated pprof endpoint in OpenKruise kruise-manager

OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field

Leverage the kruise-daemon pod to list all secrets in the entire cluster