Skip to content
OpenAdvisories

Package · Go

github.com/rancher/local-path-provisioner

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.7
    CVE-2026-44543

    Local Path Provisioner: HelperPod Template Injection

    Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. Prior to 0.0.36, a malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPo…

    rancher local-path-provisioner github.com/rancher/local-path-provisioner Go
  • Critical 9.9
    CVE-2025-62878 Public exploit

    Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

    A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.

    SUSE Rancher github.com/rancher/local-path-provisioner Go