Linuxfoundation Cni Network Plugins vulnerabilities

2 CVEs affecting Linuxfoundation Cni Network Plugins, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-67499, published 2025-12-10.

More from Linuxfoundation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-10749, published 2020-06-03. Medium severity, CVSS 6.0. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A…
• CVE-2025-67499, published 2025-12-10. Low severity, CVSS 3.6. EPSS: 0.1% chance of exploitation in the next 30 days. The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same…