CVE-2026-6437 | BDVDB-2026-327495 Detail
AmazonAWS EFS CSI Driver
Description#
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users should upgrade to version v3.0.1
Impact#
CAPEC-6: Argument Injection
Weaknesses#
- CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.