Aws Efs Csi Driver
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Aws Efs Csi Driver.
By the Year
In 2026 there have been 2 vulnerabilities in Aws Efs Csi Driver with an average score of 5.8 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 5.80 |
It may take a day or so for new Aws Efs Csi Driver vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Aws Efs Csi Driver Security Vulnerabilities
AWS EFS CSI Driver 3.1.0-3.4.2 Arg Delim Injection in Volume Handling
CVE-2026-103505
6.5 - Medium
- October 01, 2026
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute. To remediate this issue, users should upgrade to version v3.5.0 or later.
Argument Injection
Recursive dir deletion via crafted PV volumeHandle in EFS CSI Driver <v3.4.1
CVE-2026-85781
5.1 - Medium
- September 04, 2026
Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized to access, via a crafted PersistentVolume volumeHandle that pairs an access point from one filesystem with a different target filesystem. To remediate this issue, users should upgrade to version v3.4.1.
Unverified Ownership
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Aws Efs Csi Driver or by Aws? Click the Watch button to subscribe.
