Skip to content
OpenAdvisories

Vendor

k3s-io

1 known vulnerabilities.

Products

k3s 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2026-54250

    K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression

    K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s1, v1.33.10+k3s1, a path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with malicious…

    k3s-io k3s k3s-static-1.32 k3s-multicall-1.32 Wolfi Go