CVE-2026-15687
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.
Risk Assessment
An attacker could gain unauthorized access to the client's filesystem, potentially leading to privilege escalation or further compromise of the environment.
Recommendation
It is recommended to update the Kubernetes Java Client library to the latest patched version and enable tar compression (enableTarCompressing: true) where possible.
Original NVD description (English source)
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.