CVE-2022-3294

Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to establish connections to Pods, retrieve container logs, and more. While Kubernetes already validates the proxying address for Nodes, a bug in kube-apiserver made it possible to bypass this validation. Bypassing this validation could allow authenticated requests destined for Nodes to to the API server's private network.

• CWE-20

• https://github.com/kubernetes/kubernetes/issues/113757Patch, Vendor Advisory
• https://groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbAMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230505-0007/
• https://github.com/kubernetes/kubernetes/issues/113757Patch, Vendor Advisory
• https://groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbAMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230505-0007/

Published

Mar 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32933An information disclosure issue was addressed by removing th…5.3
• CVE-2022-32934The issue was addressed with improved memory handling. This …8.8
• CVE-2022-32935A lock screen issue was addressed with improved state manage…4.6
• CVE-2022-32936An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2022-32938A parsing issue in the handling of directory paths was addre…5.3
• CVE-2022-32939The issue was addressed with improved bounds checks. This is…7.8
• CVE-2022-32940The issue was addressed with improved bounds checks. This is…7.8
• CVE-2022-32941The issue was addressed with improved bounds checks. This is…9.8
• CVE-2022-32942The issue was addressed with improved memory handling. This …7.8
• CVE-2022-32943The issue was addressed with improved bounds checks. This is…5.3
• CVE-2022-32944A memory corruption issue was addressed with improved state …7.8
• CVE-2022-32945An access issue was addressed with additional sandbox restri…4.3