CVE-2024-10220Not scored
CVE-2024-10220: Arbitrary command execution through gitRepo volume
Kubernetes · kubelet
Vendor fix available · Affected: Kubernetes kubelet · Exploitation: public proof of concept (unverified)
ExploitationProof of concept public
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public8 public GitHub repositories (unverified), listed by PoC-in-GitHub21 Nov 2024
- Not established: not seen
3.0%probability of exploitation in the next 30 days
87th percentile
050100
Higher than 87% of scored CVEs
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Kubernetes
- Published
- November 2024
What changed
- PoC-in-GitHub lists 8 public GitHub repositories (unverified) PoC-in-GitHub
CoverageNo articles yet
No CyberSIXT article names CVE-2024-10220 yet. New articles appear here and in the RSS feed.