CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver
Efs Csi ยท 2026-06-05
Actions
Technical Details
| Affected Versions | <= v3.0.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-6437 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the Amazon EFS CSI Driver to version v3.0.1 to address the mount option injection vulnerability (CVE-2026-6437) and ensure the security of your Kubernetes clusters using Amazon EFS.
For Platform Teams
Deploy the updated Amazon EFS CSI Driver version v3.0.1 to enhance the security of your Kubernetes clusters using Amazon EFS and mitigate the risk of mount option injection.
For Executives
Implement the security patch for the Amazon EFS CSI Driver to mitigate the risk of mount option injection and protect Kubernetes clusters using Amazon EFS, ensuring the security and integrity of your infrastructure.