Kubeedge vulnerabilities

Products

• Kubeedge 13

Newest

• kubeedge KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes CVE-2026-62182 Fix available 8.8 HighSeptember 21, 2026
• kubeedge KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join CVE-2026-62369 Fix available 8.1 HighSeptember 21, 2026
• kubeedge KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub CVE-2026-62370 Fix available 6.5 MediumSeptember 21, 2026
• kubeedge KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API CVE-2026-62371 Fix available 8.8 HighSeptember 21, 2026
• kubeedge KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints CVE-2026-82473 8.8 HighAugust 29, 2026
• kubeedge KubeEdge Websocket Client in package Viaduct: DoS from large response message CVE-2022-31080 Fix available 4.4 MediumJuly 11, 2022
• kubeedge KubeEdge Cloud Stream and Edge Stream DoS from large stream message CVE-2022-31079 Fix available 4.4 MediumJuly 11, 2022
• kubeedge KubeEdge CloudCore Router memory exhaustion CVE-2022-31078 Fix available 4.4 MediumJuly 11, 2022
• kubeedge KubeEdge DoS when signing the CSR from EdgeCore CVE-2022-31075 Fix available 4.9 MediumJuly 11, 2022
• kubeedge KubeEdge Cloud AdmissionController component DoS CVE-2022-31074 Fix available 4.5 MediumJuly 11, 2022
• kubeedge KubeEdge Edge ServiceBus module DoS CVE-2022-31073 Fix available 6.5 MediumJuly 11, 2022
• kubeedge Malicious Message can crash CloudCore in KubeEdge CVE-2022-31076 Fix available 4.2 MediumJune 25, 2022
• kubeedge Malicious response from KubeEdge can crash CSI Driver controller server CVE-2022-31077 Fix available 4.0 MediumJune 25, 2022