Path traversal via non-tar copyDirectoryFromPod
Summary
| CVE | CVE-2026-15687 |
|---|---|
| State | PUBLISHED |
| Assigner | kubernetes |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-07-23 19:16:53 UTC |
| Updated | 2026-07-23 20:17:07 UTC |
| Description | A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false. |
Risk And Classification
Primary CVSS: v3.0 2.4 LOW from [email protected]
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Problem Types: CWE-22 | CWE-22 CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Secondary | 2.4 | LOW | CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N |
| 3.0 | CNA | CVSS | 2.7 | LOW | CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
HighUser Interaction
RequiredScope
UnchangedConfidentiality
NoneIntegrity
LowAvailability
NoneCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Kubernetes | Kubernetes-client/java | affected 10.0.0 25.0.1 semver | Not specified |
| CNA | Kubernetes | Kubernetes-client/java | affected 26.0.0 | Not specified |
| CNA | Kubernetes | Kubernetes-client/java | unaffected 25.0.1 | Not specified |
| CNA | Kubernetes | Kubernetes-client/java | unaffected 26.0.1 | Not specified |
| CNA | Kubernetes | Kubernetes-client/java | unaffected 27.0.0 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| github.com/kubernetes-client/java/issues/4861 | [email protected] | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Ibrahim el zein and Hasan Sheet (en)
Additional Advisory Data
Workarounds
CNA: Prior to upgrading, this vulnerability can be mitigated by ensuring you only copy files from trusted pods, or by ensuring tar is available in the container to use the secure tar-based copy path.
There are currently no legacy QID mappings associated with this CVE.