CVE-2026-24005

Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodProbeMarker allows defining custom probes with TCPSocket or HTTPGet handlers. The webhook validation does not restrict the Host field in these probe configurations. Since kruise-daemon runs with hostNetwork=true, it executes probes from the node network namespace. An attacker with PodProbeMarker creation permission can specify arbitrary Host values to trigger SSRF from the node, perform port scanning, and receive response feedback through NodePodProbe status messages. Versions 1.8.3 and 1.7.5 patch the issue.

• CWE-918

• https://github.com/openkruise/kruise/commit/94364b76adf3e8a1749a31afe809a163bed29613Patch
• https://github.com/openkruise/kruise/releases/tag/v1.7.5Product, Release Notes
• https://github.com/openkruise/kruise/releases/tag/v1.8.3Product, Release Notes
• https://github.com/openkruise/kruise/security/advisories/GHSA-9fj4-3849-rv9gExploit, Mitigation, Vendor Advisory

Published

Feb 25, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2400CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Inje…4.3
• CVE-2026-24000Fleet is open source device management software. Prior to ve…5.3
• CVE-2026-24001jsdiff is a JavaScript text differencing implementation. Pri…7.5
• CVE-2026-24002Grist is spreadsheet software using Python as its formula la…9.6
• CVE-2026-24003EVerest is an EV charging software stack. In versions up to …5.3
• CVE-2026-24004Fleet is open source device management software. In versions…5.3
• CVE-2026-24006Seroval facilitates JS value stringification, including comp…7.5
• CVE-2026-24007Tuleap is an Open Source Suite for management of software de…4.6
• CVE-2026-24009Docling Core (or docling-core) is a library that defines cor…9.8
• CVE-2026-2401CWE-532 Insertion of Sensitive Information into Log File vul…5
• CVE-2026-24010Horilla is a free and open source Human Resource Management …8
• CVE-2026-24012Uncontrolled Resource Consumption vulnerability in Apache Io…7.5