CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.
Summary
A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequences (../). During volume deletion or cleanup operations, the driver could operate on unintended directories outside the intended managed path within the NFS export. This may lead to deletion or modification of directories on the NFS server.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Kubernetes | CSI Driver for NFS | before 4.13.1 | 4.13.1 | Patch available | CNA |
| — | github.com/kubernetes-csi/csi-driver-nfs (Go) | before 0.0.0-20260210055231-316af2d86b91 | 0.0.0-20260210055231-316af2d86b91 | Patch available | GHSA-2mjq-54qg-7w6j |
- CSI Driver for NFS VendorKubernetes Affected before 4.13.1 Fixed in 4.13.1 Patch available CNA
- github.com/kubernetes-csi/csi-driver-nfs (Go) Vendor— Affected before 0.0.0-20260210055231-316af2d86b91 Fixed in 0.0.0-20260210055231-316af2d86b91 Patch available GHSA-2mjq-54qg-7w6j
Remediation
- Fix · CNA CSI Driver for NFS (Kubernetes) Fixed in 4.13.1
- Fix · GHSA-2mjq-54qg-7w6j github.com/kubernetes-csi/csi-driver-nfs (Go) Fixed in 0.0.0-20260210055231-316af2d86b91 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-3864
- 2026-10-03 Alias added: GHSA-2mjq-54qg-7w6j
References
Other 5
- https://groups.google.com/g/kubernetes-security-announce/c/i4ZKN9VLcUE
- https://github.com/kubernetes/kubernetes/issues/137797
- https://github.com/kubernetes-csi/csi-driver-nfs/commit/316af2d86b913a595542dc17e8599cf81afd938f
- https://github.com/kubernetes-csi/csi-driver-nfs
- http://www.openwall.com/lists/oss-security/2026/03/17/1
More Kubernetes vulnerabilities
- TI-2025-01719 ingress-nginx admission controller RCE escalation CVSS 3.1CRITICAL 9.8
- TI-2018-16130 Improper privilege management in Kubernetes CVSS 3.0CRITICAL 9.8
- TI-2025-00932 ingress-nginx controller - configuration injection via unsanitized mirror annotations CVSS 3.1HIGH 8.8
- TI-2019-08418 Kubernetes kubelet exposes /debug/pprof info on healthz port CVSS 3.1HIGH 8.2
- TI-2026-02839 ingress-nginx rewrite-target nginx configuration injection CVSS 3.1HIGH 8.8
- TI-2025-18233 ingress-nginx controller - configuration injection via unsanitized auth-url annotation CVSS 3.1HIGH 8.8
Sources
- CVE-2026-3864 · CVE Program
- CVE-2026-3864 · NVD
- FIRST EPSS
- GHSA-2mjq-54qg-7w6j · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences