← Port Encyclopedia
10250
Kubelet
TCP
Container
Critical Risk
Kubelet API — Kubernetes node agent, unauthenticated command execution
🔍 How to Scan Port 10250
nmap -sV -p 10250 target
nmap -sV -sC --script=banner -p 10250 target
nc -zv target 10250
🛡️ Security Considerations
- Scan port 10250 with
nmap -sVto identify the exact service and version - If Kubelet is not needed, close or firewall this port immediately
- Check for default credentials if a management interface runs on this port
- Use
searchsploit kubeletto find known exploits - Monitor traffic on port 10250 with Wireshark or tcpdump for anomalies
- Ensure the service is patched to the latest version to prevent known CVE exploitation