CVE-2023-3676

CSIRTS triage

What

Insufficient input sanitization in Windows nodes allows local privilege escalation.

Who is affected

Windows-based Kubernetes nodes are affected.

Urgency

High priority; local privilege escalation on Windows nodes is a direct path to cluster compromise.

Action

Update Kubernetes to a version containing the Windows node input sanitization fix.

AI-assisted analysis generated from the source advisory — verify against the original.

Exploitation outlook

• Elevated exploitation risk11.7% 30-day exploitation probability — well above the norm. Schedule remediation this cycle. Riskier than 96% of all EPSS-scored CVEs.

Advisory coverage (1)

• highCVE-2023-3676: Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalationmsrc · 2026-08-06

External references

NVD record for CVE-2023-3676

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2023-3676 status](https://www.csirts.com/badge/CVE-2023-3676)](https://www.csirts.com/cve/CVE-2023-3676)