Skip to content

CVE record · 1 source

CVE-2026-76654

CVSS 5.8

An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an…

Vendor: Kubernetes
Product: Kubernetes
CVSS v3.1: 5.8 AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-59
Exposure class: Identity, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 5d ago

An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an…

An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does not…

CVSS 5.8 CVE-2026-76654 Kubernetes