Issues

• K8s Security: [Security Advisory] CVE-2026-19444: kubectl cp path traversal on Windows allows arbitrary file writes

  externalkuberneteson-callsecurity
  aws/eks-distro#4972 · Filter by author eks-distro-bot opened on Sep 28, 2026

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2026-19444: kubectl cp path traversal on Windows allows arbitrary file writes

  externalkuberneteson-callsecurity
  aws/eks-distro#4971 · Filter by author eks-distro-bot opened on Sep 28, 2026

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2026-76654: Subpath symlinking on Windows nodes permits NTLM coercion

  externalkuberneteson-callsecurity
  aws/eks-distro#4959 · Filter by author eks-distro-bot opened on Sep 23, 2026

• K8s Security: [Security Advisory] CVE-2026-76654: Subpath symlinking on Windows nodes permits NTLM coercion

  externalkuberneteson-callsecurity
  aws/eks-distro#4958 · Filter by author eks-distro-bot opened on Sep 23, 2026

• K8s Security: [Security Advisory] CVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

  externalkuberneteson-callsecurity
  aws/eks-distro#4957 · Filter by author eks-distro-bot opened on Sep 23, 2026

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

  externalkuberneteson-callsecurity
  aws/eks-distro#4956 · Filter by author eks-distro-bot opened on Sep 23, 2026

• K8s Security: [kubernetes-announce] [Security Advisory - Kubernetes Java Client] CVE-2026-15687: Path traversal via non-tar copyDirectoryFromPod

  externalkuberneteson-callsecurity
  aws/eks-distro#4803 · Filter by author eks-distro-bot opened on Jul 22, 2026

• K8s Security: [Security Advisory - Kubernetes Java Client] CVE-2026-15687: Path traversal via non-tar copyDirectoryFromPod

  externalkuberneteson-callsecurity
  aws/eks-distro#4802 · Filter by author eks-distro-bot opened on Jul 22, 2026

• How to build two binaries on Linux host system failed

  aws/eks-distro#4750 · Filter by author phracek opened on Jun 24, 2026

• Update Base Image to use Amazon Linux 2023 variant

  aws/eks-distro#4705 · Filter by author alex-k-verkada opened on Jun 11, 2026
  3

• Security [kubelet version 1.34] is compiled with github.com/opencontainers/selinux <1.13.0 - CVE-2025-52881

  aws/eks-distro#4690 · Filter by author agomez-infoblox opened on Jun 3, 2026

• Is version tag in sync with the actual EKS versioning

  aws/eks-distro#4664 · Filter by author barmettlerl opened on May 4, 2026

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2026-3865: CSI Driver for SMB path traversal via subDir may delete unintended directories on the SMB server

  externalkuberneteson-callsecurity
  aws/eks-distro#4645 · Filter by author eks-distro-bot opened on Apr 10, 2026

• K8s Security: [Security Advisory] CVE-2026-3865: CSI Driver for SMB path traversal via subDir may delete unintended directories on the SMB server

  externalkuberneteson-callsecurity
  aws/eks-distro#4644 · Filter by author eks-distro-bot opened on Apr 10, 2026

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2026-4342: ingress-nginx comment-based nginx configuration injection

  externalkuberneteson-callsecurity
  aws/eks-distro#4599 · Filter by author eks-distro-bot opened on Mar 19, 2026

• K8s Security: [Security Advisory] CVE-2026-4342: ingress-nginx comment-based nginx configuration injection

  externalkuberneteson-callsecurity
  aws/eks-distro#4598 · Filter by author eks-distro-bot opened on Mar 19, 2026

• K8s Security: [Security Advisory] CVE-2026-3864: CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

  externalkuberneteson-callsecurity
  aws/eks-distro#4582 · Filter by author eks-distro-bot opened on Mar 17, 2026

• K8s Security: [Security Advisory] CVE-2026-3288: ingress-nginx rewrite-target nginx configuration injection

  externalkuberneteson-callsecurity
  aws/eks-distro#4564 · Filter by author eks-distro-bot opened on Mar 9, 2026

• K8s Security: [kubernetes-announce] [Security Advisory] Multiple issues in ingress-nginx

  externalkuberneteson-callsecurity
  aws/eks-distro#4471 · Filter by author eks-distro-bot opened on Feb 2, 2026

• K8s Security: [Security Advisory] Multiple issues in ingress-nginx

  externalkuberneteson-callsecurity
  aws/eks-distro#4470 · Filter by author eks-distro-bot opened on Feb 2, 2026

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2025-14269: Credential caching in Headlamp with Helm enabled

  externalkuberneteson-callsecurity
  aws/eks-distro#4395 · Filter by author eks-distro-bot opened on Dec 17, 2025

• K8s Security: [Security Advisory] CVE-2025-14269: Credential caching in Headlamp with Helm enabled

  externalkuberneteson-callsecurity
  aws/eks-distro#4394 · Filter by author eks-distro-bot opened on Dec 17, 2025

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2025-13281: Portworx Half-Blind SSRF in kube-controller-manager

  externalkuberneteson-callsecurity
  aws/eks-distro#4318 · Filter by author eks-distro-bot opened on Dec 1, 2025

• K8s Security: [Security Advisory] CVE-2025-13281: Portworx Half-Blind SSRF in kube-controller-manager

  externalkuberneteson-callsecurity
  aws/eks-distro#4317 · Filter by author eks-distro-bot opened on Dec 1, 2025

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2025-9708: Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks

  externalkuberneteson-callsecurity
  aws/eks-distro#4108 · Filter by author eks-distro-bot opened on Sep 16, 2025