« Back to list

CVE-2023-1174

Status: ModifiedCritical (9.8)—

This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Kubernetes — Minikube

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2023-1174",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-1174",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-16T20:57:26.643088Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "jordan@liggitt.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "jordan@liggitt.net",
      "affectedData": [
        {
          "vendor": "Kubernetes",
          "product": "minikube",
          "versions": [
            {
              "status": "affected",
              "version": "1.26.0",
              "lessThan": "unspecified",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "1.28.0"
            }
          ],
          "platforms": [
            "macOS"
          ]
        }
      ]
    }
  ],
  "published": "2023-05-24T17:15:09.733",
  "references": [
    {
      "url": "https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM",
      "tags": [
        "Mailing List"
      ],
      "source": "jordan@liggitt.net"
    },
    {
      "url": "https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM",
      "tags": [
        "Mailing List"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "jordan@liggitt.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-266"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container."
    }
  ],
  "lastModified": "2026-06-17T05:27:16.860",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.26.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C947A326-8671-4B10-B586-32C14E42F0D8"
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.26.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3E8A841-DF87-4018-8274-2475C9C969AC"
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.27.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D24AF30-3E95-4230-86CC-D993CBF9AE81"
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.27.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7952A75-CB33-4E52-8995-21EAA0DB80F8"
            },
            {
              "criteria": "cpe:2.3:a:kubernetes:minikube:1.28.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62E2C3FA-7F5A-40B6-AE7C-7B3207A0D781"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "jordan@liggitt.net"
}