CVE-2025-62878 — Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gainin…
Published: 2026-02-25 · CVSS: 9.9 · CVSS 3.1
A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7