CVE-2017-1002102

score

<0.1

cvss

7.1

epss

1.1%

published

2018-03-13

kev added

—

first seen

2026-10-21

Kubernetes versions 1.3.x to 1.6.x and prior to 1.7.14, 1.8.9, 1.9.4 contain a path traversal vulnerability caused by improper handling of volume mounts in containers using secret, configMap, projected, or downwardAPI volumes, letting attackers delete arbitrary files/directories on nodes, exploit requires attacker to control container volume configuration.