https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:41:40.360403+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T22:41:40.483621+00:00 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cnvd-2019-19046 cnvd-2019-19046 2026-10-03T22:41:40.483665+00:00 cnvd-2019-19046 https://cve.radiocsirt.org/vuln/euvd-2026-175237 EUVD-2026-175237 2026-10-03T22:41:40.483680+00:00 EUVD-2026-175237 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11246 fkie_cve-2019-11246 2026-10-03T22:41:40.483692+00:00

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.12.9, versions prior to 1.13.6, versions prior to 1.14.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11.

 https://cve.radiocsirt.org/vuln/ghsa-8wj5-gvvw-f5fh GHSA-8wj5-gvvw-f5fh 2026-10-03T22:41:40.483727+00:00

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user?s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user?s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.12.9, versions prior to 1.13.6, versions prior to 1.14.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11.

 https://cve.radiocsirt.org/vuln/gsd-2019-11246 gsd-2019-11246 2026-10-03T22:41:40.483747+00:00 gsd-2019-11246 https://cve.radiocsirt.org/vuln/rhsa-2019:1632 RHSA-2019:1632 — Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.10 atomic-openshift security update 2026-10-03T22:41:40.483759+00:00

kubernetes: Incomplete fix for CVE-2019-1002101 allows for arbitrary file write via `kubectl cp`

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11246 Withdrawn: UBUNTU-CVE-2019-11246 2026-10-03T22:41:40.483777+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.12.9, versions prior to 1.13.6, versions prior to 1.14.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11.