CVE-2018-1002101

score

<0.1

cvss

5.9

epss

4.0%

published

2018-12-05

kev added

—

first seen

2026-10-21

Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1 contain a command injection caused by insecure handling of user input during volume mount setup on Windows nodes, letting attackers execute arbitrary commands, exploit requires attacker to control volume mount input.