A critical authentication bypass vulnerability in KubeEdge CloudCore allows unauthenticated attackers to forge node task reports, potentially leading to persistent denial of service for cluster upgrades.

The vulnerability exists due to missing authentication checks on the HTTPS server endpoints /nodeupgrade and /task/{taskType}/name/{taskID}/node/{nodeID}/status. An unauthenticated attacker with network access to port 10002 can inject arbitrary task completion events, effectively deceiving the control plane.

Successful exploitation allows attackers to manipulate the state of edge nodes, causing legitimate upgrade jobs to be falsely marked as succeeded or permanently failed. This integrity compromise disrupts automated cluster management, prevents necessary security updates from reaching edge devices, and undermines the reliability of the entire KubeEdge deployment. Given the CVSS score of 8.2, this vulnerability represents a high risk to operational continuity.

Immediate Action: Upgrade KubeEdge CloudCore to the latest patched version available from the official KubeEdge repository. If an immediate update is not feasible, restrict network access to port 10002 to trusted management IP addresses only.

Proactive Monitoring: Monitor access logs for the CloudCore HTTPS server (port 10002) for POST requests to /nodeupgrade or /task/ endpoints originating from unauthorized or unexpected IP addresses.

Compensating Controls: Deploy a Web Application Firewall or an ingress controller policy to enforce strict request validation and authentication requirements for traffic directed at the KubeEdge management API.

Public Exploit Available: Yes, a published PoC exists, as documented in the technical write-up provided by the security researcher in the referenced GitHub repository.

This vulnerability presents a significant risk to the integrity of KubeEdge clusters by allowing unauthorized control over node maintenance tasks. Security teams must prioritize patching their CloudCore instances immediately to prevent potential service disruption and unauthorized state manipulation. Until updates are applied, rigorous network segmentation and monitoring of the management port are essential to mitigate the exposure of these unauthenticated endpoints.