K3s vulnerabilities

Products

• K3s 3

Newest

• k3s K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression CVE-2026-54250 Fix available 5.8 MediumJune 25, 2026
• k3s CNCF K3s Kubernetes kubelet configuration exposes credentials CVE-2025-46599 Fix available 6.8 MediumApril 25, 2025
• k3s K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack CVE-2023-32187 Fix available 7.5 HighSeptember 11, 2023