CLEANSTART-2026-HS37666: security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs

Q: Which environments are in scope?

The issue is described in Kubernetes clusters with Windows nodes running the affected nfs-subdir-external-provisioner package. The provided data does not indicate that clusters without Windows nodes are affected.

Q: What access does an attacker need to exploit this issue?

The severity vector indicates local access and low privileges are required, with no user interaction. The issue may allow BUILTIN\Users to read container logs and NT AUTHORITY\Authenticated Users to modify them.

Q: What is the likely security impact?

The provided severity vector rates confidentiality impact as high and integrity impact as low, with no availability impact. Exposure centers on unauthorized reading or modification of container logs.

Published Nov 5, 2026

Updated

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Affected Software

1 affected componentFixes available

cleanstart/nfs-subdir-external-provisioner<4.0.2-r4

4.0.2-r4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/nfs-subdir-external-provisioner to a version that resolves this vulnerability.
Fixed in 4.0.2-r4

Event History

Nov 5, 2026

Advisory Published

via OSV·08:09 AM

Data Sourced

via OSV·08:09 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2024-5321

Frequently Asked Questions

Which environments are in scope?

The issue is described in Kubernetes clusters with Windows nodes running the affected nfs-subdir-external-provisioner package. The provided data does not indicate that clusters without Windows nodes are affected.

What access does an attacker need to exploit this issue?

The severity vector indicates local access and low privileges are required, with no user interaction. The issue may allow BUILTIN\Users to read container logs and NT AUTHORITY\Authenticated Users to modify them.

What is the likely security impact?

The provided severity vector rates confidentiality impact as high and integrity impact as low, with no availability impact. Exposure centers on unauthorized reading or modification of container logs.

CLEANSTART-2026-HS37666: security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which environments are in scope?

What access does an attacker need to exploit this issue?

What is the likely security impact?

Company

Resources

Contact

Frequently Asked Questions

Which environments are in scope?

What access does an attacker need to exploit this issue?

What is the likely security impact?