CVE-2021-25749: Kubernetes

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.

Affected products

• Kubernetes Kubernetes: from 1.20.0, up to and including 1.21.0; from 1.22.0, before 1.22.14 (fixed in 1.22.14); from 1.23.0, before 1.23.11 (fixed in 1.23.11); from 1.24.0, before 1.24.5 (fixed in 1.24.5)

Published 2023-05-24. Last modified 2026-06-17.