Amazon Efs Csi Driver vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Amazon Efs Csi Driver: 1 record(s), with affected versions and fixes.
cpe:2.3:a:amazon:efs_csi_driver

CVE-2026-6437 Medium · 6.5 CWE-88 Apr 17, 2026

AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users should upgrade to version v3.0.1