CLEANSTART-2026-AC29768: security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes
Published Nov 5, 2026
·Updated
Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes.
Affected Software
1 affected componentFixes available
cleanstart/nfs-subdir-external-provisioner<4.0.2-r4
4.0.2-r4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/nfs-subdir-external-provisionerto a version that resolves this vulnerability.Fixed in 4.0.2-r4
Event History
Nov 5, 2026
Advisory Published
via OSV·08:10 AM
Data Sourced
via OSV·08:10 AM
DescriptionSeverityAffected Software