Mount Here, Read There: Twin Path Traversal CVEs in Kubernetes Storage

1 · Sentinelone · July 24, 2026, 1:38 a.m.
SentinelOne Insider Container Security CSI controller kubernetes CSI driver Security Path Traversal Kubernetes CVEs
Summary
This blog post discusses how a misunderstanding of filepath.Join led to cross-tenant path traversal vulnerabilities in Kubernetes CSI drivers, highlighting potential security risks within Kubernetes storage systems.
Read full post on www.sentinelone.com →
AUTHOR