CVE-2026-6437
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
6.5 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Vulnerability Description
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection.
To remediate this issue, users should upgrade to version v3.0.1
To remediate this issue, users should upgrade to version v3.0.1
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-88
Source
NVD
Discussion (0)
Add Comment
No comments yet. Be the first!