CVE-2023-1174

Published: May 24, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.

Affected (5)

Products: Kubernetes: Minikube

Kubernetes

1 product

Minikube

Configuration A

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kubernetes Minikube	Version 1.26.0
Kubernetes Minikube	Version 1.26.1
Kubernetes Minikube	Version 1.27.0
Kubernetes Minikube	Version 1.27.1
Kubernetes Minikube	Version 1.28.0

Running on/with	Platform Versions
Apple Macos	All versions

Related CWEs

CWE-266

Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

References (2)

https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM

Source: jordan@liggitt.net

Mailing List

https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

Timeline

No history available yet.