CVE-2026-3864CWE-22

CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

Medium · published March 20, 2026

CVSS v3.1
6.5
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI driver could craft volume identifiers containing path traversal sequences (../). During volume deletion or cleanup operations, the driver could operate on unintended directories outside the intended managed path within the NFS export. This may lead to deletion or modification of directories on the NFS server.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00845 · 57.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-03-20T22:21Z
EPSS history
Timeline
  • 20 MAR 22:21Z
    CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server
    cvelistv5