Vulnerability Bulletins |
CVE-2026-103505 |
|
| Affected software | AWS |
|
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute. To remediate this issue, users should upgrade to version v3.5.0 or later. |
|
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-103505 | |