CVE-2019-11249

score

<0.1

cvss

6.5

epss

3.7%

published

2019-08-29

kev added

—

first seen

2026-10-21

Kubernetes prior to 1.13.9, 1.14.5, 1.15.2, and versions 1.1 to 1.12 contain a command injection caused by malicious tar binary in containers, letting attackers execute arbitrary code and write files to the user's machine when using 'kubectl cp', exploit requires malicious tar in container.