Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

54 matches found

Kitploit
Kitploit•added 2026/11/11 5:54 p.m.•28 views

CVE-2025-62878

CVE-2025-62878: Local Path Provisioner Path Traversal Overview Item| Value ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 Severity| Critical CVSS 10.0 CWE| CWE-23 Relative Path Traversal Affected Component| rancher/local-path-provisioner Affected Versions| v0.0.27 v0.0.32 Fixed...

9.9CVSS9.1AI score0.00641EPSS
SaveExploits1References4
Wolfi
Wolfi•added 2026/11/06 11:03 p.m.•13 views

GO-2026-6865 vulnerabilities

Vulnerabilities for packages: crossplane, eksctl, kubeflow-pipelines, datadog-agent, k3s, distribution, newrelic-fluent-bit-output, timoni, neuvector-scanner, flux, wal-g, scorecard, tfsec, nri-kafka, terragrunt, percona-server-mongodb-operator, slsa-verifier, witness, kaniko, skaffold, velero,...

6.1AI score
SaveExploits0
Wolfi
Wolfi•added 2026/11/06 4:50 p.m.•15 views

CVE-2026-116591 vulnerabilities

Vulnerabilities for packages: crossplane, eksctl, kubeflow-pipelines, datadog-agent, k3s, distribution, newrelic-fluent-bit-output, timoni, neuvector-scanner, flux, wal-g, scorecard, tfsec, nri-kafka, terragrunt, percona-server-mongodb-operator, slsa-verifier, witness, kaniko, skaffold, velero,...

8.7CVSS6.1AI score0.00333EPSS
SaveExploits0
Wolfi
Wolfi•added 2026/11/06 4:50 p.m.•15 views

GHSA-FPMH-FRQ8-7RJ8 vulnerabilities

Vulnerabilities for packages: crossplane, eksctl, kubeflow-pipelines, datadog-agent, k3s, distribution, newrelic-fluent-bit-output, timoni, neuvector-scanner, flux, wal-g, scorecard, tfsec, nri-kafka, terragrunt, percona-server-mongodb-operator, slsa-verifier, witness, kaniko, skaffold, velero,...

6.1AI score
SaveExploits0
Redos
Redos•added 2026/09/22 12:00 a.m.•16 views

ROS-20260922-73-0113

The vulnerability in golang-github-rancher-local-path-provisioner is related to errors in handling relative pathnames to the directory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

9.9CVSS8.5AI score0.00641EPSS
SaveExploits1
Redos
Redos•added 2026/09/21 12:00 a.m.•15 views

ROS-20260921-73-0108

The vulnerability in golang-github-rancher-local-path-provisioner is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

8.7CVSS8.4AI score0.0041EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart•added 2026/09/01 11:17 a.m.•17 views

CLEANSTART-2026-FL25724 Security fixes in local-path-provisioner-fips 0.0.36-r2

Package local-path-provisioner-fips version 0.0.36-r2 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

9.6CVSS6.2AI score0.01834EPSS
SaveExploits0References1
osv_cleanstart
osv_cleanstart•added 2026/09/01 11:17 a.m.•18 views

CLEANSTART-2026-TD50332 Security fixes in local-path-provisioner-fips 0.0.36-r1

Package local-path-provisioner-fips version 0.0.36-r1 fixes 19 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

9.6CVSS6.2AI score0.01834EPSS
SaveExploits1References1
osv_cleanstart
osv_cleanstart•added 2026/09/01 11:17 a.m.•19 views

CLEANSTART-2026-EY45034 Security fixes in local-path-provisioner-fips 0.0.36-r3

Package local-path-provisioner-fips version 0.0.36-r3 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

9.6CVSS6.2AI score0.01834EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE•added 2026/07/30 4:48 p.m.•22 views

SUSE CVE-2026-44543

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8AI score0.0041EPSS
SaveExploits0References2
osv_cleanstart
osv_cleanstart•added 2026/07/30 7:10 a.m.•24 views

CLEANSTART-2026-IH35596 Security fixes in local-path-provisioner 0.0.36-r1

Package local-path-provisioner version 0.0.36-r1 fixes 10 vulnerabilities: CVE-2026-39824, CVE-2025-47911, CVE-2025-58190, CVE-2026-25681, CVE-2026-27136...

9.6CVSS6.3AI score0.01834EPSS
SaveExploits1References1
osv_go
osv_go•added 2026/06/25 6:43 p.m.•33 views

GO-2026-5218 Local Path Provisioner Vulnerable to HelperPod Template Injection in github.com/rancher/local-path-provisioner

Local Path Provisioner Vulnerable to HelperPod Template Injection in github.com/rancher/local-path-provisioner...

8.7CVSS8.2AI score0.0041EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE•added 2026/05/30 2:12 a.m.•26 views

CVE-2026-44543

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8.2AI score0.0041EPSS
SaveExploits0References1
NVD
NVD•added 2026/05/28 5:16 p.m.•36 views

CVE-2026-44543

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS0.0041EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/05/28 4:41 p.m.•65 views

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS0.0041EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/05/28 4:41 p.m.•42 views

EUVD-2026-32954

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8AI score0.0041EPSS
SaveExploits0References1
osv_cve
osv_cve•added 2026/05/28 4:41 p.m.•34 views

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8AI score0.0041EPSS
SaveExploits0References3
CVE
CVE•added 2026/05/28 4:41 p.m.•85 views

CVE-2026-44543

Local Path Provisioner (rancher/local-path-provisioner) is affected. Before version 0.0.36, a user with edit rights on the local-path-config ConfigMap can inject a malicious helperPod.yaml into the template used to create HelperPods during PVC provisioning/cleanup. The attacker-controlled templat...

8.7CVSS8AI score0.0041EPSS
SaveExploits0References1Affected Software1
Mend
Mend•added 2026/05/28 4:41 p.m.•12 views

CVE-2026-44543

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

9.3CVSS8AI score0.0041EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2026/05/28 4:41 p.m.•22 views

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8AI score0.0041EPSS
SaveExploits0References1
Rows per page
Query Builder