https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:40:24.195167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-167793 EUVD-2026-167793 2026-10-07T22:40:24.201014+00:00 EUVD-2026-167793 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8567 fkie_cve-2020-8567 2026-10-07T22:40:24.201047+00:00

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.

 https://cve.radiocsirt.org/vuln/ghsa-2v35-wj4r-rcmv GHSA-2v35-wj4r-rcmv — Kubernetes Secrets Store CSI Driver plugins arbitrary file write 2026-10-07T22:40:24.201079+00:00

Affected: Go: github.com/hashicorp/vault-csi-provider, Go: github.com/Azure/secrets-store-csi-driver-provider-azure, Go: github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including `/var/lib/kubelet/pods`.

 https://cve.radiocsirt.org/vuln/gsd-2020-8567 gsd-2020-8567 2026-10-07T22:40:24.201107+00:00 gsd-2020-8567