NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs
NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs
01
describes (1)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-3864US | — | — |
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2026/03/17/1WEB
- https://github.com/advisories/GHSA-2mjq-54qg-7w6jADVISORY
- https://github.com/kubernetes-csi/csi-driver-nfs/commit/316af2d86b913a595542dc17e8599cf81afd938fFIX
- https://github.com/kubernetes/kubernetes/issues/137797WEB
- https://groups.google.com/g/kubernetes-security-announce/c/i4ZKN9VLcUEWEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-3864ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan