What’s Vulnerable › Vulnerabilities

CVE-2023-1174: [minikube] Network Port exposure in minikube running on macOS using Docker driver

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-24 · updated 2026-06-17
• Weakness: CWE-266

Description

This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.

Affected products

• Kubernetes minikube: 1.26.0, 1.26.1, 1.27.0, 1.27.1, 1.28.0

References

• https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM
• https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM

Get alerted when CVE-2023-1174 or the next vulnerability affects your stack