Loading CVE intelligence

CVE-2024-10220

HighPublished

Arbitrary command execution through gitRepo volume

Published: Nov 22, 2024
Updated: Nov 25, 2024
Assigning CNA: kubernetes
Evidence observed: Aug 8, 2026

Primary CVSS

8.1/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS probability estimate

3.0%

Low · next 30 days

Percentile: 86.8%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

Sources

7

cve-2024-10220PoC
Proof-of-concept exploit for CVE-2024-10220, demonstrating the vulnerability and potential exploitation techniques.
poc-CVE-2024-10220PoC
CVE-2024-10220 POC
CVE-2024-10220PoC
Proof-of-concept exploit for CVE-2024-10220, demonstrating the vulnerability and providing a working exploit script for security testing and validation.
cve-2024-10220-test

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

Exploit

Kubernetes gitRepo volume vulnerability (CVE-2024-10220) exploit for controlled HPC security research, demonstrating arbitrary command execution on Kubernetes nodes.

CVE-2024-10220-githooksPoC

CVE-2024-10220 Test repo

CVE-2024-10220-Kubernetes-gitRepo-Volume-VulnerabilityExploit

CVE-2024-10220 reveals a critical flaw in Kubernetes’ deprecated gitRepo volume type, allowing attackers to execute arbitrary commands via malicious .hooks scripts. The article explains how this breaks container isolation and offers exploit code, automation examples, and mitigation guidance

cve-2024-10220-git-on-gitPoC

Exploit implementation for CVE-2024-10220 targeting a Git vulnerability. Provides a proof-of-concept shell script for testing and educational purposes.