PT-2026-25942 · Kubernetes · Kubernetes-Csi-Driver-Nfs

Shaul Ben Hai · Published 2026-03-17 · Updated 2026-03-27 · CVE-2026-3864

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kubernetes CSI Driver for NFS (affected versions not specified)

Description A flaw exists in the Kubernetes CSI Driver for NFS related to insufficient validation of the subDir parameter within volume identifiers. An attacker capable of creating PersistentVolumes utilizing the NFS CSI driver can construct volume identifiers containing path traversal sequences (../). This manipulation could allow the driver to operate on directories outside the intended managed path during volume deletion or cleanup, potentially leading to unauthorized deletion or modification of directories on the NFS server. The vulnerable parameter is subDir.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-3864

GHSA-2MJQ-54QG-7W6J

GO-2026-4816

SUSE-SU-2026:1135-1

Affected Products

Kubernetes-Csi-Driver-Nfs

References · 153

• https://osv.dev/vulnerability/GHSA-2mjq-54qg-7w6j · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3864 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:1135-1 · Vendor Advisory
• https://github.com/kubernetes/kubernetes/issues/137797 · Note
• https://github.com/kubernetes-csi/csi-driver-nfs/commit/316af2d86b913a595542dc17e8599cf81afd938f · Note
• https://github.com/kubernetes-csi/csi-driver-nfs · Note
• https://suse.com/security/cve/CVE-2026-33248 · Note
• https://suse.com/security/cve/CVE-2026-33419 · Note
• https://suse.com/security/cve/CVE-2026-27889 · Note
• https://suse.com/security/cve/CVE-2026-24458 · Note
• https://suse.com/security/cve/CVE-2026-33503 · Note
• http://openwall.com/lists/oss-security/2026/03/17/1 · Note
• https://suse.com/security/cve/CVE-2026-33320 · Note
• https://suse.com/security/cve/CVE-2026-33252 · Note