CVE-2021-25743: Kubernetes

Low severity, CVSS 3.0. EPSS: 0.8% chance of exploitation in the next 30 days.

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

Affected products

  • Kubernetes Kubernetes: up to and including 1.25.0; version 1.26.0 only

Published 2022-01-07. Last modified 2026-06-17.