CVE-2025-62878 - Vulnerability Analysis

Overview

A product contains a path traversal caused by manipulation of parameters.pathPattern, letting attackers create PersistentVolumes in arbitrary host locations, potentially overwriting sensitive files or accessing unintended directories, exploit requires no special privileges.

Severity & Score

Impact

Attackers can overwrite sensitive files or access unintended directories on the host, risking data integrity and confidentiality.

Mitigation

Update to the latest version or apply vendor patches addressing path traversal in PersistentVolumes.

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62878
• https://github.com/advisories/GHSA-jr3w-9vfr-c746

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner