CVE-2026-15687
LOW
INFO
Priority: 0.01
BB Relevance:
40/100
Published: 2026-07-23
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
High
UI:
Required
S:
Unchanged
C:
None
I:
Low
A:
None
Description
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.