Kubernetes CLI

by The Kubernetes Authorsv1.36.2

Last updated Jun 12, 2026

A command line tool for communicating with a Kubernetes cluster's control plane, using the Kubernetes API

Install with winget

$ winget install --id Kubernetes.kubectl --exact --version 1.36.2

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

Installers · v1.36.2

Architecture	Type	Scope	Download
x86	Portable	-	Direct
x64	Portable	-	Direct
arm64	Portable	-	Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

high7.2Patched in wingetCVE-2023-5528affects before 1.25.16, 1.26.11, 1.27.8, 1.28.4Nov 14, 2023
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.
Patch
high8.8Patched in wingetCVE-2023-3955affects before 1.24.17, 1.25.13, 1.26.8, +2 moreOct 31, 2023
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.
Patch
high8.8Patched in wingetCVE-2023-3676affects before 1.24.17, 1.25.13, 1.26.8, +2 moreOct 31, 2023
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.
Patch
medium5.8Patched in wingetCVE-2021-25736affects before 1.18.18, 1.19.10, 1.20.6Oct 29, 2023
Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress[].ip” field. Clusters where the LoadBalanc...
medium6.5Patched in wingetCVE-2023-2728affects <=1.24.14Jul 3, 2023
Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s s...
medium6.5Patched in wingetCVE-2023-2727affects <=1.24.14Jul 3, 2023
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
low3.4Patched in wingetCVE-2023-2431affects before 1.24.14, 1.25.10, 1.26.5, 1.27.2Jun 15, 2023
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in u...
high7.8Patched in wingetCVE-2021-25749affects before 1.22.14, 1.23.11, 1.24.5May 24, 2023
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.

Showing 8 of 25. Source: NVD, updated 4h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

komposeThe Kubernetes Authors
Kubernetes.komposev1.38.0
A conversion tool for Docker Compose to container orchestrators such as Kubernetes (or OpenShift).
D
Docker ComposeDocker Inc.
Docker.DockerComposev5.1.4
docker-compose plugin for docker cli
T
TrivyAqua Security Software
AquaSecurity.Trivyv0.71.0
Trivy is a comprehensive and versatile security scanner.
LensMirantis, Inc.
Mirantis.Lensv2026.5.250609-latest
The Kubernetes IDE
Google Cloud SDKGoogle LLC
Google.CloudSDKv572.0.0
Create and manage Google Cloud resources via a command line tool.
mirrordMetalBear
MetalBear.mirrordv3.216.0
Connect your local process and your cloud environment, and run local code in cloud conditions.

More from The Kubernetes Authors or browse cluster, docker, k8s.

Frequently asked questions

How do I install Kubernetes CLI on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Kubernetes.kubectl --exact --version 1.36.2. winget downloads the installer from The Kubernetes Authors and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install Kubernetes CLI silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id Kubernetes.kubectl --exact 1.36.2 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall Kubernetes CLI via winget?

Run: winget uninstall --id Kubernetes.kubectl --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Kubernetes CLI's Apps & Features entry.

Is Kubernetes CLI free?

Kubernetes CLI is distributed under Apache-2.0. Refer to the publisher (https://kubernetes.io/docs/reference/kubectl/) for the full license terms - Wingetly itself does not charge for installation.

Does Kubernetes CLI work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Kubernetes CLI directly from the publisher.

How do I keep Kubernetes CLI up to date?

Run winget upgrade --id Kubernetes.kubectl --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Kubernetes CLI from microsoft/winget-pkgs.

Recent versions

1.36.2latest
1.36.1
1.36.0
1.35.4
1.35.3
1.35.2
1.35.1
1.35.0
1.34.3
1.34.2