CVE-2024-9042
MediumAdvisory
Published 13 Mar 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.014
- 70th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 217
- of 17,781 indexed, latest versions
- Container images
- 192
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API
Carried by container images the latest versions of 217 of 17,781 indexed charts deploy, on 192 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+99 more | 1.29.13, 1.30.9, 1.31.5 | 192 |
- OSV records
- GHSA-vv39-3w5q-974q
- Also known as
- GO-2025-3522
Charts affected
217 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kyvernosoftonic | 3.5.2 | 1 of 7See more | 1,019 |
| gloo-meshsolo-gloo-mesh | 1.1.2 | 1 of 1See more | 3,257 |
| spire-identity-exchangespiffeVerified publisher | 0.2.2 | 1 of 3See more | 1,427 |
| ambassador-manifestssqream-chartsVerified publisher | 0.6.3 | 1 of 1See more | 2,416 |
| cost-analyzerstatcan | 1.82.2 | 1 of 9See more | 16,506 |
| nfs-provisionersupporttools | 0.11.0 | 1 of 1See more | 2,671 |
| tfy-inferentia-operatortruefoundryVerified publisher | 0.2.8 | 1 of 3See more | 2,902 |
| jupyterhubuninettsigma2 | 1.6.0 | 1 of 5See more | 8,607 |
| vineyard-operatorvineyardVerified publisher | 0.24.2 | 1 of 2See more | 4,525 |
| azure-scheduledevents-managerwebdevopsVerified publisher | 1.0.17 | 1 of 1See more | 1,122 |
| emissary-ingresswenerme | 8.12.2 | 1 of 2See more | 10,843 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nfs-subdir-external-provisionerwenerme | 4.0.18 | 1 of 1See more | 2,743 |
| ceph-csi-cephfswikimedia | 0.1.8 | 1 of 5See more | 10,285 |
| ceph-csi-rbdwikimedia | 0.1.13 | 1 of 6See more | 11,784 |
| csi-driver-host-pathwiremindVerified publisher | 0.1.1 | 1 of 8See more | 12,606 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,677 |
Container images carrying it
192 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 1249fc292e84 | k8s.io/ | 1.29.13 | 1 |
| bitnamilegacy/ | 64614ef8290f | k8s.io/ | 1.29.13 | 1 |
| bitnamilegacy/ | 744f84cf7493 | k8s.io/ | 1.29.13 | 1 |
| bitnamilegacy/ | f5fc0d561d9e | k8s.io/ | 1.29.13 | 1 |
| breton/ | 41b1bb483aa2 | k8s.io/ | 1.29.13 | 1 |
| burganbank/ | 9259c34e4037 | k8s.io/ | 1.29.13 | 1 |
| calico/ | 385bf6391fea | k8s.io/ | 1.29.13 | 1 |
| calico/ | d8c644a8a3ee | k8s.io/ | 1.29.13 | 1 |
| cgtysylr/ | aec0f8a38a77 | k8s.io/ | 1.29.13 | 1 |
| chriswells0/ | f3918ec8471c | k8s.io/ | 1.29.13 | 1 |
| crowdfox/ | 6fa7e8063d27 | k8s.io/ | 1.29.13 | 1 |
| csiplugin/ | 1fa83d45417f | k8s.io/ | 1.29.13 | 1 |
| datadog/ | 8f20e56b5311 | k8s.io/ | 1.29.13 | 1 |
| datawire/ | 95ec30b3c732 | k8s.io/ | 1.30.9 | 1 |
| datawire/ | 1f67a1292d2a | k8s.io/ | 1.30.9 | 1 |
| ddosify/ | ea602056d9ce | k8s.io/ | 1.29.13 | 1 |
| dongjiang1989/ | dc5bd483874c | k8s.io/ | 1.29.13 | 1 |
| dongjiang1989/ | 923085c65123 | k8s.io/ | 1.29.13 | 1 |
| dongjiang1989/ | f0055c05dbee | k8s.io/ | 1.29.13 | 1 |
| dserio83/ | 6b3d9115fee2 | k8s.io/ | 1.29.13 | 1 |
| dtzar/ | a1041bb0f1d1 | k8s.io/ | 1.29.13 | 1 |
| flomesh/ | cc39c96711c4 | k8s.io/ | 1.29.13 | 1 |
| flomesh/ | 22f849c70b25 | k8s.io/ | 1.29.13 | 1 |
| gocrane/ | a1400909118c | k8s.io/ | 1.29.13 | 1 |
| gocrane/ | 9ba6d11b2079 | k8s.io/ | 1.29.13 | 1 |
| gocrane/ | a2d7e60576f9 | k8s.io/ | 1.29.13 | 1 |
| groundnuty/ | a26d3d3f6e1c | k8s.io/ | 1.29.13 | 1 |
| hetznercloud/ | 41dce5b33644 | k8s.io/ | 1.29.13 | 1 |
| huzafach/ | 6e271d43ea48 | k8s.io/ | 1.29.13 | 1 |
| inaccel/ | a5d3d0af05c1 | k8s.io/ | 1.29.13 | 1 |
| inseefrlab/ | 31f04ca7436b | k8s.io/ | 1.29.13 | 1 |
| j0113/ | 696cb8ca9f4e | k8s.io/ | 1.29.13 | 1 |
| kubeedge/ | 460c6061b608 | k8s.io/ | 1.29.13 | 1 |
| kubesphere/ | 49b445b1b732 | k8s.io/ | 1.29.13 | 1 |
| kubevirtmanager/ | df3ea27d4a9e | k8s.io/ | 1.29.13 | 1 |
| kusionstack/ | b707d3bf0abd | k8s.io/ | 1.29.13 | 1 |
| kusionstack/ | d2f72ae1d2f2 | k8s.io/ | 1.29.13 | 1 |
| kusionstack/ | c28bd96b986b | k8s.io/ | 1.29.13 | 1 |
| leonardomulticloud/ | d119918900e8 | k8s.io/ | 1.29.13 | 1 |
| longhornio/ | dca34321452c | k8s.io/ | 1.29.13 | 1 |
| longhornio/ | ede61fe2a472 | k8s.io/ | 1.29.13 | 1 |
| mesosphere/ | 63bc411b930b | k8s.io/ | 1.29.13 | 1 |
| mesosphere/ | b036785a8862 | k8s.io/ | 1.29.13 | 1 |
| mesosphere/ | 94af41b6dd9a | k8s.io/ | 1.29.13 | 1 |
| mikejoh/ | 5c5a3b734271 | k8s.io/ | 1.31.5 | 1 |
| murtazashah46/ | 4d11726cf803 | k8s.io/ | 1.29.13 | 1 |
| natsio/ | 1261dae38389 | k8s.io/ | 1.29.13 | 1 |
| openebs/ | 4f41dd782761 | k8s.io/ | 1.29.13 | 1 |
| openpolicyagent/ | 77bc9bf3d163 | k8s.io/ | 1.29.13 | 1 |
| phntom/ | 3adadbac8443 | k8s.io/ | 1.29.13 | 1 |