What is the CVSS score of CVE-2025-70042?

CVE-2025-70042 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Thermakube are affected by CVE-2025-70042?

A critical Server-Side Request Forgery vulnerability (CVE-2025-70042) affects ThermaKube master with a CVSS score of 9.8, enabling attackers to bypass network controls and access internal systems or…

How to fix or mitigate CVE-2025-70042?

Within 24 hours: Identify all ThermaKube master instances in your environment and document their network position; implement network segmentation to restrict outbound connections from affected systems to internal resources only. Within 7 days: Deploy WAF rules to block suspicious request patterns targeting internal IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and implement request input validation; disable any non-essential ThermaKube features that accept external URLs or proxying capabilities. Within 30 days: Evaluate emergency patching timelines from oslabs-beta; develop a migration plan to alternative solutions if patch availability remains uncertain; conduct a forensic audit of ThermaKube logs for signs of exploitation.