Disclosing a directory traversal vulnerability in Kubernetes copy – CVE-2019-1002101
Summary: A researcher reported CVE-2019-1002101 to the Kubernetes and OpenShift security teams on March 4, a flaw in kubectl cp where the untar function can create and follow symbolic links from tar headers, letting a malicious container write files to arbitrary paths on the user machine. The issue affects kubectl and the OpenShift oc client from v1.9.0-alpha.2 to 1.14.0, with fixes in 1.11.9, 1.12.7 and 1.13.5, and follows the earlier directory traversal CVE-2018-1002100 in the same command.
What you should know: kubectl users are developers, devops staff and administrators whose environments hold sensitive configuration and deployment files, and if kubectl runs as root, code execution is trivial through modification of files like /etc/profile or cron entries.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-1002100CVE-2019-1002101
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026