{"id":"CVE-2024-10220","aliases":["GHSA-27wf-5967-98gx","GO-2024-3286"],"title":" Kubernetes kubelet arbitrary command execution","summary":" Kubernetes kubelet arbitrary command execution","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","vendor":"kubernetes","product":"k8s.io/kubernetes","ecosystem":"go","affected":["k8s.io/kubernetes < 1.28.12","k8s.io/kubernetes >= 1.29.0, < 1.29.7","k8s.io/kubernetes >= 1.30.0, < 1.30.3"],"patched":["k8s.io/kubernetes 1.28.12","k8s.io/kubernetes 1.29.7","k8s.io/kubernetes 1.30.3"],"published":"2024-11-22","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:20.243855183Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-27wf-5967-98gx","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10220"},{"url":"https://github.com/kubernetes/kubernetes/issues/128885"},{"url":"https://github.com/kubernetes/kubernetes/commit/1ab06efe92d8e898ca1931471c9533ce94aba29b"},{"url":"https://github.com/kubernetes/kubernetes"},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/ptNgV5Necko"},{"url":"https://pkg.go.dev/vuln/GO-2024-3286"},{"url":"http://www.openwall.com/lists/oss-security/2024/11/20/1"}],"tags":["osv","go","exploit-available"],"epss":0.03027,"epssPercentile":0.86889,"exploits":{"github":8,"githubRepos":["https://github.com/mochizuki875/CVE-2024-10220-githooks","https://github.com/any2sec/cve-2024-10220","https://github.com/filipzag/CVE-2024-10220"],"checkedAt":"2026-09-23T07:13:28.090Z"},"exploitAvailable":true,"ingestedAt":"2026-09-12T03:13:01.744Z","slug":"CVE-2024-10220","body":"## Overview\n\nThe Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.\n\n## Affected packages\n\n- `k8s.io/kubernetes < 1.28.12`\n- `k8s.io/kubernetes >= 1.29.0, < 1.29.7`\n- `k8s.io/kubernetes >= 1.30.0, < 1.30.3`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `k8s.io/kubernetes 1.28.12`\n- `k8s.io/kubernetes 1.29.7`\n- `k8s.io/kubernetes 1.30.3`","depth":"midnight","depthScore":57,"depthScoreParts":{"impact":44.6,"likelihood":0.6,"exploitation":12,"ransomware":0},"changes":[]}