CVE-2025-5187

Published Aug 27, 2025

Last updated 2 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-5187 refers to a vulnerability in Kubernetes that could allow nodes to delete themselves by adding a specific OwnerReference. This flaw can be exploited to disrupt cluster operations and cause service outages, requiring administrators to review and update their environments. Additionally, CVE-2025-5187 is listed as a reserved Common Vulnerabilities and Exposures (CVE) identifier. This means that a CVE Numbering Authority (CNA) has reserved the ID, and the record will be updated with details as they become available.

Description: A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.
Source: jordan@liggitt.net
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.7
Impact score: 5.5
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Severity: MEDIUM

Weaknesses

jordan@liggitt.net: CWE-863

Hype score: Not currently trending

References