CVE-2023-2431

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

• CWE-1287

• https://github.com/kubernetes/kubernetes/issues/118690Issue Tracking
• https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/Mailing List
• https://github.com/kubernetes/kubernetes/issues/118690Issue Tracking
• https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/Mailing List
• https://github.com/kubernetes/kubernetes/issues/118690Issue Tracking

Published

Jun 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2429Improper Access Control in GitHub repository thorsten/phpmyf…9.8
• CVE-2023-24294Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was disc…7.5
• CVE-2023-24295A stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0…7.8
• CVE-2023-2430A vulnerability was found due to missing lock for IOPOLL fla…5.5
• CVE-2023-24304Improper input validation in the PDF.dll plugin of IrfanView…7.8
• CVE-2023-24308A potential memory vulnerability due to insufficient input v…7.8
• CVE-2023-24317Judging Management System 1.0 was discovered to contain an a…8.1
• CVE-2023-24320An access control issue in Axcora POS #0~gitf77ec09 allows u…9.8
• CVE-2023-24322A reflected cross-site scripting (XSS) vulnerability in the …6.1
• CVE-2023-24323Mojoportal v2.7 was discovered to contain an authenticated X…8.8
• CVE-2023-24329An issue in the urllib.parse component of Python before 3.11…7.5
• CVE-2023-2433The YARPP plugin for WordPress is vulnerable to Stored Cross…5.4