CVE-2021-25737

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

• CWE-184
• CWE-601

• https://github.com/kubernetes/kubernetes/issues/102106Patch, Third Party Advisory
• https://groups.google.com/g/kubernetes-security-announce/c/xAiN3924thYMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20211004-0004/Third Party Advisory
• https://github.com/kubernetes/kubernetes/issues/102106Patch, Third Party Advisory
• https://groups.google.com/g/kubernetes-security-announce/c/xAiN3924thYMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20211004-0004/Third Party Advisory

Published

Sep 6, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25695The USB vHub in the Teradici PCOIP Software Agent prior to v…7.8
• CVE-2021-25698The OpenSSL component of the Teradici PCoIP Standard Agent p…7.8
• CVE-2021-25699The OpenSSL component of the Teradici PCoIP Software Client …7.8
• CVE-2021-25701The fUSBHub driver in the PCoIP Software Client prior to ver…5.5
• CVE-2021-25735A security issue was discovered in kube-apiserver that could…6.5
• CVE-2021-25736Kube-proxy on Windows can unintentionally forward traffic t…6.3
• CVE-2021-25738Loading specially-crafted yaml with the Kubernetes Java Clie…6.7
• CVE-2021-25740A security issue was discovered with Kubernetes that could e…3.1
• CVE-2021-25741A security issue was discovered in Kubernetes where a user m…8.1
• CVE-2021-25742A security issue was discovered in ingress-nginx where a use…7.1
• CVE-2021-25743kubectl does not neutralize escape, meta or control sequence…3
• CVE-2021-25745A security issue was discovered in ingress-nginx where a use…8.1