CyberRota Analysis
AI-GeneratedA vulnerability in the Kubernetes Java client library allows a compromised pod to create files in arbitrary locations on the client machine during copy operations, specifically when the enableTarCompressing option is set to false. Although classified as low severity, this issue poses a risk of unauthorized file manipulation, which could lead to further exploitation. Organizations using the Kubernetes Java client library should prioritize remediation to mitigate potential security risks associated with pod compromises.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.