CVE-2026-3864
2 advisories.
Go/github.com/kubernetes-csi/csi-driver-nfs CVE-2026-3864: medium 6.5
NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter
Action: Upgrade github.com/kubernetes-csi/csi-driver-nfs to 0.0.0-20260210055231-316af2d86b91 or later.
go get github.com/kubernetes-csi/csi-driver-nfs@v0.0.0-20260210055231-316af2d86b91Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260210055231-316af2d86b91 |
Sources
- osv: GHSA-2mjq-54qg-7w6j
- https://nvd.nist.gov/vuln/detail/CVE-2026-3864
- https://github.com/kubernetes/kubernetes/issues/137797
- https://github.com/kubernetes-csi/csi-driver-nfs/commit/316af2d86b913a595542dc17e8599cf81afd938f
- https://github.com/kubernetes-csi/csi-driver-nfs
- https://groups.google.com/g/kubernetes-security-announce/c/i4ZKN9VLcUE
- http://www.openwall.com/lists/oss-security/2026/03/17/1
CVE-2026-3864 · published · modified · JSON
Go/github.com/kubernetes-csi/csi-driver-nfs CVE-2026-3864: unknown
NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs
Action: Upgrade github.com/kubernetes-csi/csi-driver-nfs to 0.0.0-20260210055231-316af2d86b91 or later.
go get github.com/kubernetes-csi/csi-driver-nfs@v0.0.0-20260210055231-316af2d86b91Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260210055231-316af2d86b91 |
Sources
- osv: GO-2026-4816
- https://github.com/advisories/GHSA-2mjq-54qg-7w6j
- https://nvd.nist.gov/vuln/detail/CVE-2026-3864
- https://github.com/kubernetes-csi/csi-driver-nfs/commit/316af2d86b913a595542dc17e8599cf81afd938f
- http://www.openwall.com/lists/oss-security/2026/03/17/1
- https://github.com/kubernetes/kubernetes/issues/137797
- https://groups.google.com/g/kubernetes-security-announce/c/i4ZKN9VLcUE
CVE-2026-3864 · published · modified · JSON