VULNERABILITY INTELLIGENCE
CVE-2025-46599
CVSS score6.8 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2025-04-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255. For example, the default behavior of a K3s online installation might allow unauthenticated access to this port, exposing credentials.
Weakness classification
- cve@mitre.org: CWE-1188