CVEvulnerability

CVE-2026-15687

2.4 LOW Published 2026-07-23 Modified 2026-10-24 Official page ↗
Status
Awaiting Analysis
Published
2026-07-23
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.0 ([email protected])
2.4 LOW — CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-22

Description

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References