Vulnerabilitymedium
[kubernetes] CVE-2026-19444: kubectl cp path traversal on Windows allows arbitrary file writes
AI summary · grok-4.7Summaries by Vani AI
Kubernetes assigned CVE-2026-19444 to a Windows kubectl cp path traversal that allows arbitrary file writes.
Vyom Yadav notified the Kubernetes community on oss-security about CVE-2026-19444. The flaw is a path traversal in kubectl cp on Windows that allows arbitrary file writes. It has a CVSS 3.1 score of 6.5. The published message is truncated before the full affected-version and remediation guidance.
Key facts
- CVE-2026-19444 is a path traversal in kubectl cp on Windows.
- Successful use can write arbitrary files on the client.
- The issue is scored CVSS 3.1 6.5.
- Vyom Yadav disclosed it to the Kubernetes oss-security list.
- CVEs
- CVE-2026-19444
- Vendors
- Kubernetes
- Products
- kubectl
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-19444 | Windows kubectl cp path traversal allows arbitrary file writes | 6.5 | — |
From the original article
Posted by Vyom Yadav on Sep 28 Hello Kubernetes Community, https://www. first. org/cvss/calculator/3.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.