CVE-2019-11251

score

<0.1

cvss

4.8

epss

2.6%

published

2020-02-03

kev added

—

first seen

2026-10-21

Kubernetes kubectl cp command in versions 1.1-1.12, 1.13.10 and earlier, 1.14.6 and earlier, 1.15.3 and earlier contains a symlink traversal caused by tar output from malicious containers, letting attackers place files outside the destination directory, exploit requires attacker to control container content.