# Unpatchable Vulnerabilities of Kubernetes: CVE-2020-8562

DevFeed: [Unpatchable Vulnerabilities of Kubernetes: CVE-2020-8562](<https://devfeed.tech/articles/unpatchable-vulnerabilities-of-kubernetes-cve-2020-8562-8299.md>)

Original publisher: [Read original article](<https://securitylabs.datadoghq.com/articles/unpatchable-kubernetes-vulnerabilities-cve-2020-8562/>)

Author: Rory McCune

Published: 2026-04-09T00:00:00Z

Content type: article

Language: en

Sources: [Datadog Security Labs](<https://devfeed.tech/sources/datadog-security-labs.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [API](<https://devfeed.tech/topics/api.md>), [network security](<https://devfeed.tech/topics/network-security.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [cve](<https://devfeed.tech/tags/cve.md>), [dns](<https://devfeed.tech/tags/dns.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [network-security](<https://devfeed.tech/tags/network-security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

This article examines Kubernetes CVE-2020-8562, an unpatchable time-of-check to time-of-use vulnerability in the API server proxy. Attackers with sufficient privileges can exploit inconsistent DNS resolution responses to bypass protections against proxying requests to private IPv4 addresses and reach services in restricted network zones.

## Source excerpt

A look at how Kubernetes CVE-2020-8562 allows attackers to bypass API server proxy protections using DNS rebinding