CVE-2026-24005

Severity CVSS v4.0:

Pending analysis

Type:

CWE-918 Server-Side Request Forgery (SSRF)

Publication date:

25/02/2026

Last modified:

05/03/2026

Description

Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodProbeMarker allows defining custom probes with TCPSocket or HTTPGet handlers. The webhook validation does not restrict the Host field in these probe configurations. Since kruise-daemon runs with hostNetwork=true, it executes probes from the node network namespace. An attacker with PodProbeMarker creation permission can specify arbitrary Host values to trigger SSRF from the node, perform port scanning, and receive response feedback through NodePodProbe status messages. Versions 1.8.3 and 1.7.5 patch the issue.

Impact

Vector 3.x

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N CVSS v3.1 Severity and Metrics:

Base Score: 0.00 NONE
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): None
Integrity (I): None
Availability (A): None

Base Score 3.x

0.00

Severity 3.x

NONE

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:openkruise:kruise::::::::		1.7.5 (excluding)
cpe:2.3:a:openkruise:kruise::::::::	1.8.0 (including)	1.8.3 (excluding)

To consult the complete list of CPE names with products and versions, see this page

CVE-2026-24005

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools