CVE-2019-15789: Microk8s Privilege Escalation Vulnerability
Published Apr 8, 2020
·Updated
Last updated 25 August 2025
Other sources
Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3.
— Launchpad
Affected Software
1 affected component
Canonical Microk8s<1.15.3
Remediation
Patch Available
Event History
Apr 8, 2020
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Aug 5, 2024
Data Sourced
via Launchpad·01:02 AM
Description
Data Sourced
via Debian·01:02 AM
DescriptionAffected Software
Feb 20, 2026
Data Sourced
via Ubuntu·11:42 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-15789?
CVE-2019-15789 is classified as a privilege escalation vulnerability.
2
How do I fix CVE-2019-15789?
To address CVE-2019-15789, update MicroK8s to version 1.15.3 or later.
3
Who is affected by CVE-2019-15789?
CVE-2019-15789 affects users of MicroK8s versions prior to 1.15.3.
4
What type of vulnerability is CVE-2019-15789?
CVE-2019-15789 is a privilege escalation vulnerability that allows low privilege users to gain root access.
5
What can an attacker do with CVE-2019-15789?
An attacker exploiting CVE-2019-15789 can provision a privileged container leading to root access on the host.