CLEANSTART-2026-LO67730: Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec
Published Nov 5, 2026
·Updated
Security vulnerability affects the nfs-subdir-external-provisioner package. Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.
Affected Software
1 affected componentFixes available
cleanstart/nfs-subdir-external-provisioner<4.0.2-r4
4.0.2-r4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/nfs-subdir-external-provisionerto a version that resolves this vulnerability.Fixed in 4.0.2-r4
Event History
Nov 5, 2026
Advisory Published
via OSV·08:10 AM
Data Sourced
via OSV·08:10 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access and conditions does an attacker need to exploit this issue?
The severity vector indicates network access is required, attack complexity is high, and the attacker needs low privileges. No user interaction is required.
2
What is the potential impact if exploitation succeeds?
The vulnerability is rated medium with a 6.3 score. The provided vector indicates high confidentiality impact, with no integrity or availability impact, and a changed scope.