CVE-2025-62878 - Vulnerability Analysis

Overview

A product contains a path traversal caused by manipulation of parameters.pathPattern, letting attackers create PersistentVolumes in arbitrary host locations, potentially overwriting sensitive files or accessing unintended directories, exploit requires no special privileges.

Severity & Score

Impact

Attackers can overwrite sensitive files or access unintended directories on the host, risking data integrity and confidentiality.

Mitigation

Update to the latest version or apply vendor patches addressing path traversal in PersistentVolumes.

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62878
• https://github.com/advisories/GHSA-jr3w-9vfr-c746

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 25, 2026

🔴 CVE-2025-62878 - Critical (9.9) A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-62878/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

GitHub Repositories(1 repo)

• https://github.com/kinokopio/CVE-2025-62878

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner