CVE-2025-1767: Kubernetes Kubelet

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.

Affected products

• Kubernetes Kubelet: up to and including v1.32.2

Published 2025-03-13. Last modified 2026-06-17.