https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:52:14.482042+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-270831 EUVD-2026-270831 2026-10-07T21:52:14.552171+00:00 EUVD-2026-270831 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62878 fkie_cve-2025-62878 2026-10-07T21:52:14.552212+00:00

A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.

 https://cve.radiocsirt.org/vuln/ghsa-jr3w-9vfr-c746 GHSA-jr3w-9vfr-c746 — Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern 2026-10-07T21:52:14.552249+00:00

Affected: Go: github.com/rancher/local-path-provisioner

### Impact

A malicious user can manipulate the [parameters.pathPattern](https://github.com/rancher/local-path-provisioner/blob/d4f71b4b03a321e9f54be00808e9de42b8bfd35a/provisioner.go#L381) to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.

Example: ``` apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: > {"apiVersion":"storage.k8s.io/v1","kind":"StorageClass","metadata":{"annotations":{},"name":"local-path"},"provisioner":"rancher.io/local-path","reclaimPolicy":"Delete","volumeBindingMode":"WaitForFirstConsumer"} storageclass.kubernetes.io/is-default-class: 'true' name: local-path provisioner: rancher.io/local-path reclaimPolicy: Delete parameters: pathPattern: "{{ .PVC.Namespace }}/{{ .PVC.Name }}/../../../../../etc/new-dir" volumeBindingMode: WaitForFirstConsumer Results in the PersistentVolume to target /etc/new-dir: ``` This produces a PersistentVolume that points to `/etc/new-dir`, instead of a path under the configured base directory.

Expected Behavior: - Paths generated from pathPattern should always resolve under the configured base path. - Relative path elements (e.g., ..) should be normalized or rejected.

### Patches

This vulnerability is addressed by validating and normalizing the `parameters.pathPattern` to ensure that generated PersistentVolume paths always resolve…

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-62878 msrc_CVE-2025-62878 — Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern 2026-10-07T21:52:14.552303+00:00 msrc_CVE-2025-62878 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0344 WID-SEC-W-2026-0344 — Rancher Local Path Provisioner: Schwachstelle ermöglicht Manipulation von Dateien 2026-10-07T21:52:14.552363+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Rancher Local Path Provisioner ausnutzen, um Dateien zu manipulieren.