Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-1174

[minikube] Network Port exposure in minikube running on macOS using Docker driver

Critical9.8EPSS 0.76%
Published
Updated
Reserved
Assigned by
kubernetes

Description

This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.

Timeline

  1. ID reserved

    By kubernetes

  2. · 3 months later

    Published

  3. · 20 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-1174, by who scored it
Scored byCVSSScoreVector
kubernetesCNA (assigner)3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.76% · top 45% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

Affected products

  • Kubernetes · minikube

    • affected 1.26.0 – < unspecified
    • affected unspecified – ≤ 1.28.0

What to do

Solution: To mitigate these vulnerabilities, upgrade minikube to the latest version and delete any clusters created using an affected version. To delete clusters created using prior versions, run `minikube delete --all`

Workaround: To continue using an existing cluster, change the default port mappings of the minikube container and restart the docker daemon - docker run -v /var/lib/docker:/var/lib/docker -e MINIKUBE_CONTAINER_ID="$(docker ps --no-trunc -aqf 'name=^minikube$')" -it --entrypoint /bin/sh alpine sed -i 's/0.0.0.0/127.0.0.1/g' /var/lib/docker/containers/$MINIKUBE_CONTAINER_ID/config.v2.json

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-1174 badge
[![CVE-2023-1174](https://trackcve.app/badge/CVE-2023-1174.svg)](https://trackcve.app/cve/CVE-2023-1174)

Record last updated .