CVE-2026-15687 — Path traversal via non-tar copyDirectoryFromPod
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine execut…
Published: 2026-07-23 · CVSS: 2.7 · CVSS 3.0
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7