Skip to content
OpenAdvisories

Package · Go

github.com/rancher/local-path-provisioner

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2025-62878 Public exploit

    Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

    A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.

    SUSE Rancher github.com/rancher/local-path-provisioner Go