Aller au contenu
Se connecter
6.5 Moyenne

CVE-2026-103505 Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver…

Description

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute. To remediate this issue, users should upgrade to version v3.5.0 or later.

Produits et versions touchés

Produit Versions touchées Corrigé en
aws-efs-csi-driver 3.1 3.1.0 → 3.4.2 Pas de correctif indiqué

Autres CVE de aws-efs-csi-driver

Les 2 CVE de aws-efs-csi-driver →
CVE-2026-85781 Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before… 5.1 Moyenne
Suivre cette CVE