Database/Container, Kubernetes & orchestration

Kubernetes (kube-controller-manager): Half-blind SSRF via the Portworx in-tree volume plugin in kube-controller-manager

CVE-2025-13281Container, Kubernetes & orchestrationcurated

Impact

Half-blind SSRF via the Portworx in-tree volume plugin in kube-controller-manager

Who can reach it

Cluster user able to create a Portworx volume

What to do

Rolling control-plane upgrade; remove the in-tree Portworx plugin

References

https://kubernetes.io/docs/reference/issues-security/official-cve-feed/

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.