2.7
Low
CVE-2026-15687 A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create…
Description
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kubernetes-client/java 27.0 | earliest → < 27.0.0 | 27.0.0 |
| kubernetes-client/java | 26.0.0 | 26.0.1 |
| kubernetes-client/java 25.0 | earliest → < 25.0.1 | 25.0.1 |
| kubernetes-client/java 10.0 | 10.0.0 → < 25.0.1 | 25.0.1 |