CVE-2018-1002102

score

<0.1

cvss

2.6

epss

0.6%

published

2019-12-05

kev added

—

first seen

2026-10-21

Kubernetes API server prior to v1.14.0 contains an improper validation of URL redirection caused by insecure redirect handling in the API server, letting attacker-controlled Kubelet redirect requests to arbitrary hosts, exploit requires attacker-controlled Kubelet.