PT-2026-64145 · Kubernetes · Kubernetes-Client/Java

CVE-2026-15687 · Publicado 2026-07-23 · Atualizado 2026-07-23

NVD

CVSS v3.1

2.4

Baixa

Vetor base

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-15687

Produtos afetados

Kubernetes-Client/Java

Referências · 2

• https://github.com/kubernetes-client/java/issues/4861 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15687 · Nota de Segurança