A vulnerability in the Kubernetes Image Builder enables default credentials during the image build process. Virtual machine images created with the Nutanix or OVA providers do not disable these default credentials, potentially allowing root access to nodes using these images. This affects Kubernetes clusters only if Windows nodes use VM images built via the Image Builder with these providers.