CVE-2026-103505

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

EUVD-2026-90883

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505

The AWS EFS CSI Driver (aws-efs-csi-driver ) versions v3.1.0 through v3.4.2 are vulnerable to an improper neutralization of argument delimiters within the volume handling component. This flaw could allow remote authenticated users who possess PersistentVolume creation permissions to inject arbitr...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

PT-2026-103904

Name of the Vulnerable Software and Affected Versions AWS EFS CSI Driver aws-efs-csi-driver versions 3.1.0 through 3.4.2 Description Improper neutralization of argument delimiters in the volume handling component allows remote authenticated users with PersistentVolume creation permissions to inje...

CLEANSTART-2026-KK52429 Security fix for CVE-2025-1767 applied in: aws-efs-csi-driver 2.2.0-r1, calico-fips 3.31.2-r1, ip-masq-agent 2.12.6-r1, pulumi-kubernetes-operator 2.7.0-r0

CVE-2025-1767 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, aws-efs-csi-driver-fips...

GO-2023-2330 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2022-0983 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, spark-operator, aws-efs-csi-driver-fips, argocd-image-updater, argocd-image-updater-fips, kubeflow-pipelines, kubernetes-dns-node-cache, nodetaint, kubernetes, kubernetes-csi-driver-hostpath, ip-masq-agent, rancher-webhook, aws-efs-csi-driver,...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver, aws-efs-csi-driver-fips, argocd-image-updater-fips...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, nodetaint, kubernetes-dns-node-cache, ip-masq-agent, prometheus-adapter, aws-efs-csi-driver, aws-ebs-csi-driver, spark-operator...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nodetaint, ip-masq-agent, cri-tools, spark-operator, aws-efs-csi-driver, argocd-image-updater, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner, kubernetes-dns-node-cache...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nodetaint, ip-masq-agent, aws-efs-csi-driver, argocd-image-updater, kubeflow-pipelines, local-static-provisioner, kubernetes-dns-node-cache...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: nodetaint, ip-masq-agent, spark-operator, aws-efs-csi-driver, kubernetes-dns-node-cache, prometheus-adapter...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

GO-2023-2170 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, trino, opa-envoy, nri-haproxy, kots, omnibump, kubernetes, mattermost, spqr, net-kourier, actions-runner-controller, gomplate, ingress-nginx-controller, nri-kubernetes, runc, dask-gateway, azcopy, kubernetes-replicator,...