CVE-2026-15687 Security Details

CVE ID

CVE-2026-15687

CWE

CWE-22

CVE Description

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.

Published

Jul 24, 2026

CVSS Score & Severity

2.4Low

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS Score

0.235%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

GitHub · Issue #4861PROJECT

GitHub · Advisory · GHSA-95wq-2cx3-rp73THIRD_PARTY