CVE-2023-5528 can let a user with permission to create pods and persistent volumes escalate to administrator privileges on an affected Kubernetes Windows node. It is not unauthenticated remote code execution: the risk applies when a cluster has Windows nodes and uses an in-tree storage plugin for them. The Kubernetes Security Response Committee rated the flaw High, with a CVSS 3.1 score of 8.8.
What CVE-2023-5528 does—and when it applies
The Kubernetes Security Response Committee disclosed CVE-2023-5528 on November 14, 2023. It describes a privilege-escalation flaw in certain Windows-node storage configurations. A user who can create both pods and persistent volumes may exploit it to gain administrator privileges on an affected Windows node. The advisory’s description is therefore more precise than the broad phrase “remote code execution”: exploitation depends on Kubernetes API permissions and the affected configuration, rather than an unauthenticated connection from anywhere.
The issue applies only to clusters using an in-tree storage plugin for Windows nodes. Kubernetes supports Windows as a worker-node operating system; the control plane runs on Linux. A cluster without Windows worker nodes does not match the advisory’s stated scope. See the Kubernetes CVE-2023-5528 advisory and Kubernetes documentation on Windows containers.
How to check whether your cluster may be affected
- Look for Windows nodes. Run
kubectl get nodes -l kubernetes.io/os=windows. Any returned nodes are Windows workers to investigate; an empty result means this particular Windows-node issue does not match the cluster’s current node list. - Check the storage configuration. Determine whether those nodes use an in-tree storage plugin for Windows. The advisory limits the vulnerability to that configuration; the presence of Windows nodes alone does not establish that the cluster is vulnerable.
- Check effective permissions. The stated exploitation prerequisite is the ability to create pods and persistent volumes. Review which users and service accounts have both capabilities, especially where they can affect workloads scheduled to Windows nodes.
- Verify the release and vendor status. Compare the kubelet release with the upstream advisory, then check the security notice for your Kubernetes distribution or managed service. A provider may deliver a backport without using the upstream version number shown below.
Affected and fixed Kubernetes versions
The November 2023 upstream advisory lists kubelet versions from v1.8.0 onward as affected, subject to the Windows-node storage configuration described above. It names these fixed releases for older branches:
#1 Best Overall
- Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
| Upstream branch | Fixed release named in the November 2023 advisory |
|---|---|
| 1.28 | v1.28.4 |
| 1.27 | v1.27.8 |
| 1.26 | v1.26.11 |
| 1.25 | v1.25.16 |
These are historical upstream fixed versions, not a recommendation in 2026 to install an obsolete branch. Use a currently supported Kubernetes release that includes the fix, and consult your vendor’s security notice for its backport status. The upstream list is not a provider-specific version map.
How to remediate
The Kubernetes advisory says the provided patch fully mitigates CVE-2023-5528 and that no other mitigation is known. Upgrade the affected cluster components using the supported procedure for your distribution or managed provider; follow its guidance on release selection and sequencing. Kubernetes’ cluster upgrade documentation explains the upstream upgrade process.
Rank #2
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
If you cannot confirm whether a vendor release contains the patch, ask the provider or consult its security advisory rather than assuming that a matching version string—or a different version string—proves patch status. Restricting pod or persistent-volume creation can reduce exposure to the stated exploitation prerequisite, but the upstream advisory does not identify this as a substitute for applying the patch.
How to look for possible exploitation
Kubernetes audit logs may help identify activity associated with exploitation. The advisory identifies PersistentVolume creation events whose local path fields contain special characters as a strong indication. It does not provide a complete detection rule, and the indicator is not proof by itself. Investigate relevant events in context, including the actor, timing, associated pod activity, and affected Windows nodes.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Rank #3
- Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
- 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
- ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
- ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
- ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.
Absence of that indicator does not establish that a cluster was not exploited. If you find evidence of exploitation, the advisory directs operators to contact security@kubernetes.io.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Severity and current security context
The committee rated CVE-2023-5528 High (CVSS 3.1: 8.8; vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The score describes severity, not how often exploitation occurs; the advisory does not provide a prevalence or incident-count figure.
Rank #4
- Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
- Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
- Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
- EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
- Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
This is a 2023 vulnerability, not a complete inventory of current Kubernetes risks. The project’s official Kubernetes CVE feed is a live index maintained by the community and, on October 4, 2026, included other Windows-related findings. Review current advisories as well as this CVE when assessing Windows worker nodes. Kubernetes’ Windows documentation also describes Windows-specific feature constraints that can affect cluster design.
Quick Recap
Best Value
- Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
