Description
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kubernetes | Kubernetes Secrets Store CSI Driver | Vault Plugin – < v0.0.6, Azure Plugin – < v0.0.10, GCP Plugin – < v0.2.0 | v0.0.6 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/Azure/secrets-store-csi-driver-provider-azure | < 0.0.10 | 0.0.10 | GHSA-2v35-wj4r-rcmv |
| Go | github.com/Azure/secrets-store-csi-driver-provider-azure | all versions | — | GO-2024-2750 |
| Go | github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp | < 0.2.0 | 0.2.0 | GHSA-2v35-wj4r-rcmv |
| Go | github.com/hashicorp/vault-csi-provider | < 0.0.6 | 0.0.6 | GHSA-2v35-wj4r-rcmv |
| Go | github.com/hashicorp/vault-csi-provider | all versions | — | GO-2024-2750 |