CVE-2026-54250 | k3s-io k3s up to 1.33.10+0/1.34.6+0/1.35.3+0 path traversal (GHSA-jxr7-mqhw-9p98)

A vulnerability, which was classified as critical, was found in k3s-io k3s up to 1.33.10+0/1.34.6+0/1.35.3+0. Affected by this issue is some unknown functionality. Such manipulation leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-54250. Local access is required to approach this attack. No exploit exists.

You should upgrade the affected component.