Mount Here, Read There: Twin Path Traversal CVEs in Kubernetes Storage

· Sentinelone · July 24, 2026, 1:38 a.m.
Container Security SentinelOne Insider CSI controller kubernetes CSI driver Kubernetes Security CVEs Path Traversal
Summary
This blog post discusses how a misunderstanding of filepath.Join led to cross-tenant path traversal vulnerabilities in Kubernetes CSI drivers, highlighting potential security risks within Kubernetes storage systems.
Read full post on www.sentinelone.com →
AUTHOR
Sponsored
Zulip logo Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →