Not scored
CVE-2025-62878
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
SUSERancher
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 50% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.
Coverage 1 article · 1 outlet
- CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path ProvisionerSecurityOnline · first in our coverage