What’s Vulnerable › Vulnerabilities

CVE-2020-8568: Kubernetes Secrets Store CSI Driver sync/rotate directory traversal

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-21 · updated 2026-06-17
• Weakness: CWE-20

Description

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that contain other Kubernetes Secrets.

Affected products

• Kubernetes Secrets Store CSI Driver: 0.0.15, 0.0.16

References

• https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/378
• https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/Cb9cvymTzl4
• https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/378
• https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/Cb9cvymTzl4

Get alerted when CVE-2020-8568 or the next vulnerability affects your stack