https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:06:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-377789 EUVD-2026-377789 https://cve.radiocsirt.org/vuln/euvd-2026-377789 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19444 <p>A path traversal vulnerability was discovered in the Kubernetes kubectl client&#39;s kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in the container is malicious, it can execute arbitrary code and emit unexpected output, allowing an attacker who controls container contents to write files to arbitrary paths on the user&#39;s local machine when kubectl cp is invoked, limited only by the system permissions of the local user. This issue only affects kubectl clients running on Windows.</p> <p>A path traversal vulnerability was discovered in the Kubernetes kubectl client&#39;s kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in the container is malicious, it can execute arbitrary code and emit unexpected output, allowing an attacker who controls container contents to write files to arbitrary paths on the user&#39;s local machine when kubectl cp is invoked, limited only by the system permissions of the local user. This issue only affects kubectl clients running on Windows.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-19444 https://cve.radiocsirt.org/vuln/ghsa-pw89-p422-jr5j <p>A path traversal vulnerability was discovered in the Kubernetes kubectl client&#39;s kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in the container is malicious, it can execute arbitrary code and emit unexpected output, allowing an attacker who controls container contents to write files to arbitrary paths on the user&#39;s local machine when kubectl cp is invoked, limited only by the system permissions of the local user. This issue only affects kubectl clients running on Windows.</p> <p>A path traversal vulnerability was discovered in the Kubernetes kubectl client&#39;s kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in the container is malicious, it can execute arbitrary code and emit unexpected output, allowing an attacker who controls container contents to write files to arbitrary paths on the user&#39;s local machine when kubectl cp is invoked, limited only by the system permissions of the local user. This issue only affects kubectl clients running on Windows.</p> https://cve.radiocsirt.org/vuln/ghsa-pw89-p422-jr5j https://cve.radiocsirt.org/vuln/msrc_cve-2026-19444 msrc_CVE-2026-19444 https://cve.radiocsirt.org/vuln/msrc_cve-2026-19444 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3613 <p>Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Kubernetes ausnutzen, um Dateien zu manipulieren.</p> <p>Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Kubernetes ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3613