What’s Vulnerable › Products

kubeedge vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your kubeedge version is affected

Latest kubeedge vulnerabilities

• CVE-2026-62369 — KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join (CVSS 8.1)
• CVE-2026-62182 — KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes (CVSS 8.8)
• CVE-2026-62371 — KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API (CVSS 8.8)
• CVE-2026-62370 — KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub (CVSS 6.5)
• CVE-2026-82473 — KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints (CVSS 8.2)
• CVE-2022-31080 — KubeEdge Websocket Client in package Viaduct: DoS from large response message (CVSS 6.5)
• CVE-2022-31079 — KubeEdge Cloud Stream and Edge Stream DoS from large stream message (CVSS 6.5)
• CVE-2022-31078 — KubeEdge CloudCore Router memory exhaustion (CVSS 6.5)
• CVE-2022-31075 — KubeEdge DoS when signing the CSR from EdgeCore (CVSS 6.5)
• CVE-2022-31074 — KubeEdge Cloud AdmissionController component DoS (CVSS 6.5)
• CVE-2022-31073 — KubeEdge Edge ServiceBus module DoS (CVSS 7.5)
• CVE-2022-31077 — Malicious response from KubeEdge can crash CSI Driver controller server (CVSS 5.7)
• CVE-2022-31076 — Malicious Message can crash CloudCore in KubeEdge (CVSS 5.7)