Improper input validation in Kubernetes
Priority LOW 28CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Partial Red Hat: 1 fixed, 1 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat.
Summary
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.
Why it matters now
EPSS 0.01673 76th percentileScored 2026-11-07
Fix Partial Kubernetes (Kubernetes): v1.9.6k8s.io/kubernetes (Go): 1.9.6Red Hat: 1 fixed, 1 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Kubernetes | Kubernetes | v1.5.x; v1.6.x; v1.7.x; v1.8.x; before v1.9.6 | v1.9.6 | Patch available | CNA |
| — | k8s.io/kubernetes (Go) | 1.5.0-alpha.0 to before 1.9.6 | 1.9.6 | Patch available | GHSA-2jq6-ffph-p4h8 |
- Kubernetes VendorKubernetes Affected v1.5.x; v1.6.x; v1.7.x; v1.8.x; before v1.9.6 Fixed in v1.9.6 Patch available CNA
- k8s.io/kubernetes (Go) Vendor— Affected 1.5.0-alpha.0 to before 1.9.6 Fixed in 1.9.6 Patch available GHSA-2jq6-ffph-p4h8
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:* | 1.5.0 – 1.5.9; 1.6.0 – 1.6.14; 1.7.0 – 1.7.17; 1.8.0 – 1.8.15; 1.9.0 – 1.9.5 | Vulnerable | Kubernetes |
- cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:* Versions 1.5.0 – 1.5.9; 1.6.0 – 1.6.14; 1.7.0 – 1.7.17; 1.8.0 – 1.8.15; 1.9.0 – 1.9.5 Vulnerable ·Kubernetes
Remediation
- Fix · CNA Kubernetes (Kubernetes) Fixed in v1.9.6
- Fix · GHSA-2jq6-ffph-p4h8 k8s.io/kubernetes (Go) Fixed in 1.9.6 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 3.9 | Fixed | — |
Not affected: 3 products
- Red Hat OpenShift Container Platform 3.10
- Red Hat OpenShift Container Platform 3.11
- Red Hat OpenShift Container Platform 4
Timeline
- 2026-10-02 Threatist record created from CVE-2018-1002100
- 2026-10-03 Alias added: GHSA-2jq6-ffph-p4h8
References
More Kubernetes vulnerabilities
- TI-2018-16130 Improper privilege management in Kubernetes CVSS 3.0CRITICAL 9.8
- TI-2019-08418 Kubernetes kubelet exposes /debug/pprof info on healthz port CVSS 3.1HIGH 8.2
- TI-2023-05086 Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation CVSS 3.1HIGH 8.8
- TI-2023-03433 Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation CVSS 3.1HIGH 8.8
- TI-2023-02285 Bypass of seccomp profile enforcement CVSS 3.1MEDIUM 5.5
- TI-2017-14755 Link following in Kubernetes CVSS 3.0CRITICAL 9.6
Sources
- CVE-2018-1002100 · CVE Program
- CVE-2018-1002100 · NVD
- FIRST EPSS
- GHSA-2jq6-ffph-p4h8 · GitHub Advisory Database · CC BY 4.0
- CVE-2018-1002100 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences