Skip to content

Vendor

containernetworking vulnerabilities

3 published CVES affecting containernetworking, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
1
Low
1
Unscored
0
CISA KEV
0
Atom feed of containernetworking alerts

Products

Latest containernetworking CVEs

Newest publication first

  1. CVE-2025-67499 CNI Plugins Portmap nftables backend intercepts non-local traffic

    Published
    LowCVSS 3.6 EPSS 0.15%

    The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container. Versions 1.6.0 through 1.8.0 inadvertently forward all traffic with the same destination port as the host port when the portmap plugin is configured with the nftable...

  2. CVE-2021-20206 containernetworking/cni improper limitation of path name

    Published
    HighCVSS 7.2 EPSS 1.5%

    An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsew...

  3. CVE-2020-10749 containernetworking/plugins vulnerable to MitM attacks

    Published
    MediumCVSS 6.0 EPSS 2.1%

    A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertiseme...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.