CVE-2026-15687 – Path traversal via non-tar copyDirectoryFromPod

CVE ID :CVE-2026-15687

Published : July 23, 2026, 7:16 p.m. | 32 minutes ago

Description :A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.

Severity: 2.7 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…