Database/Container, Kubernetes & orchestration
Kubernetes Image Builder: Nutanix/OVA Windows images use default credentials unless overridden
CVSS 7.5CVE-2025-7342Container, Kubernetes & orchestrationcurated
Impact
Nutanix/OVA Windows images use default credentials unless overridden
Who can reach it
Unauthenticated network reaching an affected node
What to do
Rebuild affected Windows node images
References
Related entries
- Kubernetes Image Builder: Default credentials present during the build window for several providersCVE-2024-9594 · Kubernetes Image BuilderMedium
- Kubernetes Image Builder: VM images built with the Proxmox provider ship default credentialsCVE-2024-9486 · Kubernetes Image BuilderCritical
- Argo Workflows (Argo Server, WorkflowTemplate / ClusterWorkflowTemplate endpoints): The template endpoints serveCVE-2026-28229 · Argo Workflows (Argo Server, WorkflowTemplate / ClusterWorkflowTemplate endpoints)High
- Argo Workflows (Argo Server, webhook interceptor /api/v1/events/): The webhook interceptor buffers the entire requestCVE-2026-42294 · Argo Workflows (Argo Server, webhook interceptor /api/v1/events/)High
- Podman: Image env var with a key and no value causes Podman to pass the host's value of that variableCVE-2026-57231 · PodmanHigh
- Envoy: malformed upstream response trailers dispatch through a freed decoder and crash the proxyCVE-2026-73513 · Envoy (oghttp2 upstream HTTP/2 codec, ClientStreamImpl)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.