ROS-20260922-73-0113

The vulnerability in golang-github-rancher-local-path-provisioner is related to errors in handling relative pathnames to the directory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20260921-73-0108

The vulnerability in golang-github-rancher-local-path-provisioner is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

CVE-2026-44543: Improper Privilege Management

Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by...