CVE-2017-1002101

PoC —

CVSS 3.0

9.6 critical

EPSS

13%p96

Published

Mar 13, 2018 (Mar 13, 2018)

Modified

Jun 17, 2026

Description

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.

Vendors: kubernetes
Products: kubernetes
Weakness: CWE-59
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (13.3%)

In the news0 stories

No ingested article mentions this CVE yet.