Skip to content

CVE-2026-3864

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
March 18, 2026
Last Seen
March 18, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A path traversal vulnerability has been discovered in the Kubernetes Container Storage Interface (CSI) Driver for NFS, allowing attackers to delete or modify unintended directories on NFS servers. This flaw, tracked as CVE-2026-3864, is due to insufficient validation of the subDir parameter in volum...

Public Exploits

Checking GitHub for proof-of-concept code…