Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

50 matches found

Kitploit
Kitploit•added 2026/10/16 1:07 a.m.•20 views

CVE-2025-62878

CVE-2025-62878: Local Path Provisioner Path Traversal Overview Item| Value ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 Severity| Critical CVSS 10.0 CWE| CWE-23 Relative Path Traversal Affected Component| rancher/local-path-provisioner Affected Versions| v0.0.27 v0.0.32 Fixed...

9.9CVSS8.8AI score0.00604EPSS
SaveExploits1References4
Redos
Redos•added 2026/09/22 12:00 a.m.•14 views

ROS-20260922-73-0113

The vulnerability in golang-github-rancher-local-path-provisioner is related to errors in handling relative pathnames to the directory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

9.9CVSS8.5AI score0.00604EPSS
SaveExploits1
Redos
Redos•added 2026/09/21 12:00 a.m.•14 views

ROS-20260921-73-0108

The vulnerability in golang-github-rancher-local-path-provisioner is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

8.7CVSS8.6AI score0.00387EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart•added 2026/09/01 11:17 a.m.•14 views

CLEANSTART-2026-FL25724 Security fixes in local-path-provisioner-fips 0.0.36-r2

Package local-path-provisioner-fips version 0.0.36-r2 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

9.6CVSS6.2AI score0.00692EPSS
SaveExploits0References1
osv_cleanstart
osv_cleanstart•added 2026/09/01 11:17 a.m.•14 views

CLEANSTART-2026-TD50332 Security fixes in local-path-provisioner-fips 0.0.36-r1

Package local-path-provisioner-fips version 0.0.36-r1 fixes 19 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

9.6CVSS6.2AI score0.00781EPSS
SaveExploits1References1
osv_cleanstart
osv_cleanstart•added 2026/09/01 11:17 a.m.•13 views

CLEANSTART-2026-EY45034 Security fixes in local-path-provisioner-fips 0.0.36-r3

Package local-path-provisioner-fips version 0.0.36-r3 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

9.6CVSS6.2AI score0.00692EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE•added 2026/07/30 4:48 p.m.•16 views

SUSE CVE-2026-44543

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8.2AI score0.00387EPSS
SaveExploits0References2
osv_cleanstart
osv_cleanstart•added 2026/07/30 7:10 a.m.•19 views

CLEANSTART-2026-IH35596 Security fixes in local-path-provisioner 0.0.36-r1

Package local-path-provisioner version 0.0.36-r1 fixes 10 vulnerabilities: CVE-2026-39824, CVE-2025-47911, CVE-2025-58190, CVE-2026-25681, CVE-2026-27136...

9.6CVSS6.3AI score0.00781EPSS
SaveExploits1References1
osv_go
osv_go•added 2026/06/25 6:43 p.m.•26 views

GO-2026-5218 Local Path Provisioner Vulnerable to HelperPod Template Injection in github.com/rancher/local-path-provisioner

Local Path Provisioner Vulnerable to HelperPod Template Injection in github.com/rancher/local-path-provisioner...

8.7CVSS8.4AI score0.00387EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE•added 2026/05/30 2:12 a.m.•23 views

CVE-2026-44543

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8.2AI score0.00387EPSS
SaveExploits0References1
NVD
NVD•added 2026/05/28 5:16 p.m.•32 views

CVE-2026-44543

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS0.00387EPSS
SaveExploits0References1
CVE
CVE•added 2026/05/28 4:41 p.m.•71 views

CVE-2026-44543

Local Path Provisioner (rancher/local-path-provisioner) is affected. Before version 0.0.36, a user with edit rights on the local-path-config ConfigMap can inject a malicious helperPod.yaml into the template used to create HelperPods during PVC provisioning/cleanup. The attacker-controlled templat...

8.7CVSS8.2AI score0.00387EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2026/05/28 4:41 p.m.•20 views

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8.2AI score0.00387EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/05/28 4:41 p.m.•37 views

EUVD-2026-32954

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8.2AI score0.00387EPSS
SaveExploits0References1
attackerkb
attackerkb•added 2026/05/28 4:41 p.m.•26 views

CVE-2026-44543

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8.2AI score0.00387EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2026/05/28 4:41 p.m.•55 views

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS0.00387EPSS
SaveExploits0References1
osv_cve
osv_cve•added 2026/05/28 4:41 p.m.•27 views

CVE-2026-44543 Local Path Provisioner: HelperPod Template Injection

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS6AI score
SaveExploits0References3
CNNVD
CNNVD•added 2026/05/28 12:00 a.m.•29 views

Local Path Provisioner security vulnerability

Local Path Provisioner is a Kubernetes local storage dynamic provisioning tool developed by Rancher. Versions of Local Path Provisioner prior to 0.0.36 contained security vulnerabilities. These vulnerabilities stemmed from insufficient validation of the helperPod.yaml template. Malicious users...

8.7CVSS8.3AI score0.00387EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/05/28 12:00 a.m.•9 views

CVE-2026-44543: Improper Privilege Management

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...

8.7CVSS8.2AI score0.00387EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog•added 2026/05/11 4:15 p.m.•26 views

Local Path Provisioner Vulnerable to HelperPod Template Injection

Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...

8.7CVSS8.1AI score0.00387EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder