CVE-2026-3864
CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server
- State
- Published
- Severity
- 6.5 Medium
- Published
- Mar 20, 2026
- Updated
- Mar 23, 2026
- Reserved
- Mar 10, 2026
Description
A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequences (../). During volume deletion or cleanup operations, the driver could operate on unintended directories outside the intended managed path within the NFS export. This may lead to deletion or modification of directories on the NFS server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H | kubernetes |
Weaknesses
- CWE-22 Path Traversal
Affected Products
| Product | Versions |
|---|---|
CSI Driver for NFSKubernetes |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.