Findings

CVE-2026-3865

CSI Driver for SMB path traversal via subDir may delete unintended directories on the SMB server

Published Apr 10, 2026 · Kubernetes Kubernetes

CSI Driver for SMB path traversal via subDir may delete unintended directories on the SMB server

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 10, 2026 · Kubernetes Security

    Detected

    CSI Driver for SMB path traversal via subDir may delete unintended directories on the SMB server

Sources

  • Kubernetes SecurityVendor advisoryCVE-2026-3865

    CSI Driver for SMB path traversal via subDir may delete unintended directories on the SMB server

    github.com