CVE-2026-15687

Name of the Vulnerable Software and Affected Versions Kubernetes Java client library (affected versions not specified)

Description An issue exists where a compromised pod can create new files in arbitrary locations on the client machine. This occurs during copy operations using the non-tar copyDirectoryFromPod() function when the enableTarCompressing variable is set to false. This is a path traversal flaw, which allows an attacker to access and modify files outside the intended directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, avoid using the copyDirectoryFromPod() function with enableTarCompressing set to false.