Browse / Kubernetes

Kubernetes

See its reports on the map

Attack surface: 662 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Kubernetes

• Access Control14
• Authentication12
• Information Disclosure11
• Code Execution10
• Denial of Service6
• Cryptography5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Node disk DOS by writing to container /etc/hostsUncontrolled Resource Consumption · medium
   $1,000161 votes
2. Injection in path parameter of Ingress-nginxCode Injection · high
   91 votes
3. elections.k8s.io uses weak session secret key, may place elections at riskCryptographic Issues - Generic · high
   $25086 votes
4. Bypass validation parts in AWS IAM Authenticator for KubernetesImproper Authentication - Generic · high
   $2,50068 votes
5. CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodesCode Injection · high
   $5,00067 votes
6. Subdomain Takeover Via via Dangling NS records on Amazon Route 53 http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.ioImproper Authentication - Generic · medium
   $25062 votes
7. Ingress nginx annotation injection causes arbitrary command executionCode Injection · high
   $2,50057 votes
8. Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespacesPrivilege Escalation · high
   55 votes
9. Privilege Escalation in kOps using GCE/GCP ProviderPrivilege Escalation · high
   $2,50052 votes
10. SSRF vulnerability can be exploited when a hijacked aggregated api server such as metrics-server returns 30XServer-Side Request Forgery (SSRF) · medium
    $1,00051 votes
11. RCE on ingress-nginx-controller via Ingress spec.rules.http.paths.path fieldCode Injection · high
    $2,50047 votes
12. Loading YAML in Java client can lead to command executionDeserialization of Untrusted Data · medium
    $1,00045 votes
13. Code inject via nginx.ingress.kubernetes.io/permanent-redirect annotationCode Injection · high
    $2,50040 votes
14. monitoring.prow-canary.k8s.io is vulnerable to CVE-2022-21703 (Grafana 0-day)Cross-Site Request Forgery (CSRF) · low
    $10036 votes
15. Ingress-nginx annotation injection allows retrieval of ingress-nginx serviceaccount token and secrets across all namespacesCode Injection · high
    34 votes
16. File Read Vulnerability allows Attackers to Compromise S3 buckets using ProwImproper Access Control - Generic · medium
    $25026 votes
17. SSRF for kube-apiserver cloudprovider sceneServer-Side Request Forgery (SSRF) · medium
    24 votes
18. Half-Blind SSRF found in kube/cloud-controller-manager can be upgraded to complete SSRF (fully crafted HTTP requests) in vendor managed k8s service.Server-Side Request Forgery (SSRF) · high
    $5,00021 votes
19. Broken link hijacking in https://kubernetes-csi.github.io/docs/drivers.html?highlight=chubaofs#production-driversInsecure Temporary File · low
    $10018 votes
20. Broken Domain Link Takeover from kubernetes.io docsInsecure Temporary File · low
    $10017 votes
21. Ingress-nginx path allows retrieval of ingress-nginx serviceaccount tokenPrivilege Escalation · high
    $2,50017 votes
22. Code Injection via Insecure Yaml.loadCode Injection · low
    $25017 votes
23. Github Account Takeover from Docs page of `kubernetes-csi.github.io`Improper Access Control - Generic · low
    16 votes
24. Blind SSRF on velodrome.canary.k8s.ioServer-Side Request Forgery (SSRF) · low
    16 votes
25. csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVCNULL Pointer Dereference · medium
    $50015 votes
26. Git Arg Injection in kubernetes-sigs/release-sdk Code Injection · low
    $10014 votes
27. Google storage bucket takeover which is used to load JS file in dashboard.html in "github.com/kubernetes/release" which can lead to XSSImproper Access Control - Generic · medium
    14 votes
28. Node Validation Admission does not observe all oldObject fieldsImproper Access Control - Generic · medium
    14 votes
29. Index Out Of Bounds in protobuf unmarshallingBuffer Over-read
    $25013 votes
30. Broken Link Hijacking on kubernetes.io DocumentationImproper Access Control - Generic · low
    12 votes
31. SHA512 incorrect on most/many releasesCryptographic Issues - Generic · medium
    11 votes
32. The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAMLCode Injection · medium
    $1,00010 votes
33. Compromise of node can lead to compromise of pods on other nodesmedium
    10 votes
34. IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisementsMan-in-the-Middle · medium
    10 votes
35. Kubelet resource exhaustion attack via metric label cardinality explosion from unauthenticated requestsUncontrolled Resource Consumption · medium
    9 votes
36. Compromise of auth via subset/superset namespace names.Authentication Bypass Using an Alternate Path or Channel · medium
    8 votes
37. Tokenless GUI AuthenticationImproper Authentication - Generic · medium
    7 votes
38. kubeadm logs tokens before deleting themInsufficiently Protected Credentials · low
    7 votes
39. Bypass apiserver proxy filterTime-of-check Time-of-use (TOCTOU) Race Condition · medium
    7 votes
40. Broken Link Takeover from kubernetes.io docsImproper Access Control - Generic · low
    6 votes
41. DoS for client-go jsonpath funcUncontrolled Resource Consumption · low
    6 votes
42. Grafana Improper authorization Improper Authorization · low
    6 votes
43. Holes in EndpointSlice Validation Enable Host Network HijackPrivilege Escalation · low
    5 votes
44. KOPS documentation references domains which were not registeredPrivilege Escalation · low
    5 votes
45. Broken Github Link Used in deployment docs of "github.com/kubernetes/kompose"Improper Access Control - Generic · medium
    4 votes
46. Broken link hijacing in https://kubernetes-csi.github.io/docs/drivers.htmlViolation of Secure Design Principles · medium
    4 votes
47. DoS for GCSArtifact.RealAllUncontrolled Resource Consumption · medium
    4 votes
48. secret leaks in vsphere cloud controller manager logCleartext Storage of Sensitive Information · medium
    $5003 votes
49. Man in the middle using LoadBalancer or ExternalIPs servicesMan-in-the-Middle · medium
    2 votes
50. CVE-2019-11250 remains in effect.Cleartext Storage of Sensitive Information · medium
    1 votes