CVE-2026-76654 | Kubernetes up to 1.34.11/1.35.8/1.36.4/1.37.0 kubelet subPath link following

October 27, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Kubernetes up to 1.34.11/1.35.8/1.36.4/1.37.0. The impacted element is an unknown function of the component kubelet. Executing a manipulation of the argument subPath can lead to link following.

The identification of this vulnerability is CVE-2026-76654. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More