CVE-2026-3865 | Kubernetes up to 1.20.0 CSI Driver for SMB path traversal (Issue 138319)

A vulnerability was found in Kubernetes up to 1.20.0 and classified as critical. Affected by this issue is some unknown functionality of the component CSI Driver for SMB. Executing a manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2026-3865. The attack is only possible within the local network. No exploit exists.

It is suggested to upgrade the affected component.