A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk. This can be achieved by sending a large number of requests to the read-only HTTP port, which is enabled by default on port 10255, to create container checkpoints, resulting in the creation of multiple checkpoint files in /var/lib/kubelet/checkpoints. However, for the issue to be exploitable, several factors must coincide, including the read-only port being enabled, the container runtime supporting container checkpointing, and the ContainerCheckpoint feature gate being enabled in the kubeapi.