CVE-2026-85781

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

CVE-2026-85781 Unverified access point ownership in Amazon EFS CSI Driver

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

EUVD-2026-71692

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

CVE-2026-85781

The Amazon EFS CSI Driver (kubernetes-sigs/aws-efs-csi-driver) before v3.4.1 is vulnerable to unverified ownership of a storage access point in its volume deletion component. An authenticated Kubernetes user with PersistentVolume creation privileges can craft a PersistentVolume volumeHandle that ...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, aws-efs-csi-driver-fips...

GO-2023-2330 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2022-0983 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater-fips, aws-efs-csi-driver-fips, argocd-image-updater...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, local-static-provisioner, argocd-image-updater, spark-operator, nodetaint, aws-efs-csi-driver-fips, rancher-webhook, kubernetes, kubeflow-pipelines, rancher-webhook-fips, aws-ebs-csi-driver, argocd-image-updater-fips,...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, prometheus-adapter, spark-operator, aws-efs-csi-driver-fips, aws-ebs-csi-driver, nodetaint, kubernetes-dns-node-cache...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater, cri-tools, spark-operator, local-static-provisioner, kubeflow-pipelines, k8s-device-plugin, nodetaint, kubernetes-csi-driver-hostpath, ip-masq-agent, aws-efs-csi-driver...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, spark-operator, nodetaint, ip-masq-agent, prometheus-adapter, aws-efs-csi-driver...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater, aws-efs-csi-driver, local-static-provisioner, k8s-device-plugin, nodetaint, ip-masq-agent, kubeflow-pipelines...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: karpenter, kiali, crossplane-provider-family-aws, terraform-docs, rancher-helm, atlantis, apisix-ingress-controller, cert-manager-webhook-pdns, crossplane-provider-azure-storage, rancher-webhook, src-fingerprint, guac, amazon-cloudwatch-agent-operator,...

Amazon EFS CSI Driver 安全漏洞

The Amazon EFS CSI Driver is an open-source component developed by the Kubernetes SIGs, used for mounting AWS File Storage in Kubernetes clusters. Previous versions of the Amazon EFS CSI Driver, such as 3.0.1, contained security vulnerabilities. These vulnerabilities stemmed from improper paramet...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cadvisor, contour, karpenter, rancher-helm, prometheus-operator, atlantis, gitsign, apisix-ingress-controller, crossplane-provider-azure-storage, k8s-device-plugin, argo-workflows, amazon-cloudwatch-agent-operator, dkron, gcsfuse, grafana, kafka-proxy, kine,...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, local-static-provisioner, argocd-image-updater, k8s-device-plugin, nodetaint, aws-efs-csi-driver-fips, rancher-webhook, kubeflow-pipelines, local-static-provisioner-fips, kubernetes-dns-node-cache-fips, rancher-webhook-fips,...