Skip to content

Guide to CVE-2025-9708 #1668

Description

@tg123

CVE-2025-9708

Solution 1: Update to KubernetesClient 17.0.13+ if dotnet8+

Most recommended

Common Issues when updating from version < 7.x

#772
#824

Solution 2: Cant update or using KubernetesClient.Classic (net48 or netstandard2.0)

  1. Disable Custom CA

     config.SslCaCerts = null;
    
  2. Trust CA from kubeconfig

Example

        static void Main(string[] args)
        {
            var config = KubernetesClientConfiguration.BuildDefaultConfig();
            config.SslCaCerts = null; // ADD THIS LINE

            IKubernetes client = new Kubernetes(config);
            Console.WriteLine("Starting Request!");

            var list = client.CoreV1.ListNamespacedPod("default");
            foreach (var item in list.Items)
            {
                Console.WriteLine(item.Metadata.Name);
            }
        }
Install-Module -Name powershell-yaml -Scope CurrentUser

.\importca.ps1 # see attached ps1

importca.ps1.zip

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    lifecycle/rottenDenotes an issue or PR that has aged beyond stale and will be auto-closed.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions