CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver
Efs Csi ยท 2026-10-02
Actions
Technical Details
| Affected Versions | v3.1.0, v3.4.2 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-103505 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the Amazon EFS CSI Driver to version v3.5.0 to address the mount option injection vulnerability (CVE-2026-103505) and ensure the security of your Kubernetes clusters.
For Platform Teams
Deploy the latest version of the Amazon EFS CSI Driver (v3.5.0) to incorporate the security fixes and maintain the integrity of your Kubernetes storage solutions.
For Executives
Implement the security patch for the Amazon EFS CSI Driver to mitigate the risk of mount option injection and ensure the security of Kubernetes clusters using Amazon EFS.
Source
Related Efs Csi Updates
- CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver (2026-09-29)
- CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver (2026-09-25)
- CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver (2026-09-24)
- CVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI Driver (2026-09-09)
- CVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI Driver (2026-09-04)