CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress[].ip” field. Clusters where the LoadBalancer controller sets the “status.loadBalancer.ingress[].ip” field are unaffected.

• CWE-114

• https://github.com/kubernetes/kubernetes/pull/99958Third Party Advisory
• https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20231221-0003/
• https://github.com/kubernetes/kubernetes/pull/99958Third Party Advisory
• https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20231221-0003/

Published

Oct 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25694Teradici PCoIP Graphics Agent for Windows prior to 21.03 doe…7.8
• CVE-2021-25695The USB vHub in the Teradici PCOIP Software Agent prior to v…7.8
• CVE-2021-25698The OpenSSL component of the Teradici PCoIP Standard Agent p…7.8
• CVE-2021-25699The OpenSSL component of the Teradici PCoIP Software Client …7.8
• CVE-2021-25701The fUSBHub driver in the PCoIP Software Client prior to ver…5.5
• CVE-2021-25735A security issue was discovered in kube-apiserver that could…6.5
• CVE-2021-25737A security issue was discovered in Kubernetes where a user m…4.8
• CVE-2021-25738Loading specially-crafted yaml with the Kubernetes Java Clie…6.7
• CVE-2021-25740A security issue was discovered with Kubernetes that could e…3.1
• CVE-2021-25741A security issue was discovered in Kubernetes where a user m…8.1
• CVE-2021-25742A security issue was discovered in ingress-nginx where a use…7.1
• CVE-2021-25743kubectl does not neutralize escape, meta or control sequence…3