一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月2日

CVE-2026-103505 [MEDIUM] – Improper neutralization of argument delimiters in the volume handling component in AWS EFS

未分类
📑 文章目录

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute.

To remediate this issue, users should upgrade to version v3.5.0 or later.