Unrated severityNVD Advisory· Published Jul 23, 2026· Updated Jul 23, 2026
Path traversal via non-tar copyDirectoryFromPod
CVE-2026-15687
Description
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.
Affected products
1Patches
Vulnerability mechanics
References
1- github.com/kubernetes-client/java/issues/4861mitreissue-tracking
News mentions
0No linked articles in our index yet.