VULNERABILITY INTELLIGENCE

CVE-2025-5187

CVSS score6.7 MEDIUM

EPSS probability0.57%

CISA KEVNot currently listed

Published2025-08-27

Last modified2026-06-17

Description

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.