top of page



Perceptive Security
SOC/SIEM Consultancy

Possible exploit variant for CVE-2024-9042 (Kubernetes OS Command Injection), (Wed, Dec 10th)
Published:
10 december 2025 om 15:25:08
Alert date:
10 december 2025 om 16:01:24
Source:
isc.sans.edu
Analysis of a possible exploit variant for CVE-2024-9042, a command injection vulnerability in the Kubernetes NodeLogQuery feature that was fixed last year. The vulnerability requires several specific conditions to be met for successful exploitation. This represents an active security concern for Kubernetes deployments that may not have applied the necessary patches.
Technical details
Mitigation steps:
Affected products:
Kubernetes
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
bottom of page
