Skip to content

CVE record · 2 sources

CVE-2026-103505

CVSS 6.5

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2…

Vendor: Amazon Web Services, Kubernetes
Product: Kubernetes
CVSS: 6.5
Exposure class: Developer platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

AWS bulletin AWS 29d ago

CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver

Bulletin ID: 2026-120-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 08:30 AM PDT Description: The Amazon EFS CSI Driver is a Container Storage Interface driver that allows Kubernetes…

CVE-2026-103505 Amazon Web Services Kubernetes
8

CVE NVD 30d ago

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2…

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to…

CVSS 6.5 Fix available CVE-2026-103505