CVE-2019-11246

score

<0.1

cvss

6.5

epss

3.6%

published

2019-08-29

kev added

—

first seen

2026-10-21

Kubernetes versions prior to 1.12.9, 1.13.6, 1.14.2, and 1.1 to 1.11 contain a command injection caused by malicious tar binary in containers, letting attackers execute arbitrary code and write files to the user's machine when using 'kubectl cp', exploit requires malicious tar in container.