CVE-2018-1002100

score

<0.1

cvss

4.2

epss

1.7%

published

2018-06-02

kev added

—

first seen

2026-10-21

Kubernetes versions 1.5.x to 1.8.x and prior to 1.9.6 contain a path traversal caused by insecure handling of tar data in kubectl cp command, letting attackers overwrite arbitrary local files, exploit requires attacker to control container data.