CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API

[kaarthis]

More here : kubernetes/kubernetes#129654

Essentially this CVE impacts the kubelet feature "NodeLogQuery", which is not enabled on AKS clusters, hence there is no direct risk for existing Windows node pools. The fix has been backported to supported Kubernetes versions and will be available soon

[microsoft-github-policy-service]

This issue has been automatically marked as stale because it has not had any activity for 21 days. It will be closed if no further activity occurs within 7 days of this comment.