Executive brief
Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils
Affected products
- Go k8s.io/kubernetes
- Go k8s.io/mount-utils
Junglewise Threat Intelligence
CVE-2023-3955: GO-2023-2170 - Insufficient input sanitization on Windows nodes leads to privilege escalation in k8s.io/kubernetes and k8s.io/mount-utils
CVE-2023-3955 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: k8s.io/kubernetes (Go). Vendors: Go.
Related threats
- GO-2025-4240 - Half-blind Server Side Request Forgery in kube-controller-manager through in-tree Portworx StorageClass in k8s.io/kubernetes
- GO-2025-3915 - Kubernetes Nodes can delete themselves by adding an OwnerReference in k8s.io/kubernetes
- GO-2025-3774 - Kubernetes allows nodes to bypass dynamic resource allocation authorization checks in k8s.io/kubernetes
- GO-2025-3645 - Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes
- GO-2025-3522 - Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes