CVE-2026-62369: high-severity vulnerability in kubeedge
KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.1epss 0.6%
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.16.0 until 1.21.2, 1.22.2, and 1.23.1, the DecompressTarGz function in keadm/cmd/keadm/app/cmd/util/common.go joins archive entry names to the extraction destination without sufficient validation. During keadm join or installation on Windows edge nodes, an archive influenced through a compromised, replaced, or untrusted download source can contain parent-directory components, Windows-style backslashes, absolute paths, or drive-prefixed paths that escape the intended directory. The affected keadm process can consequently write or overwrite files with its own privileges, potentially modifying configuration, executable, or service files and enabling persistent system modification or code execution. This issue is fixed in versions 1.21.2, 1.22.2, and 1.23.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Affected products
kubeedge · kubeedgeRelated CVEs — kubeedge
In the same product, most dangerous first.
CVE-2022-31073MEDIUMKubeEdge Edge ServiceBus module DoSEPSS 1.7%CVE-2022-31075MEDIUMKubeEdge DoS when signing the CSR from EdgeCoreEPSS 1.0%CVE-2022-31077MEDIUMMalicious response from KubeEdge can crash CSI Driver controller serverEPSS 0.8%CVE-2022-31074MEDIUMKubeEdge Cloud AdmissionController component DoSEPSS 0.8%CVE-2022-31080MEDIUMKubeEdge Websocket Client in package Viaduct: DoS from large response messageEPSS 0.7%CVE-2022-31079MEDIUMKubeEdge Cloud Stream and Edge Stream DoS from large stream messageEPSS 0.7%
References
https://github.com/kubeedge/kubeedge/blob/master/CHANGELOG/CHANGELOG-1.21.mdhttps://github.com/kubeedge/kubeedge/blob/master/CHANGELOG/CHANGELOG-1.22.mdhttps://github.com/kubeedge/kubeedge/blob/master/CHANGELOG/CHANGELOG-1.23.mdhttps://github.com/kubeedge/kubeedge/commit/47767b7f2649afcfa3a856e87d556f7777e0428dhttps://github.com/kubeedge/kubeedge/commit/a524a66a1ae1691eb8ff16b6ff9a93fb370d4047https://github.com/kubeedge/kubeedge/commit/ee02dea9d08114afc4a8f401b1c2f30e84e1de40https://github.com/kubeedge/kubeedge/pull/7028https://github.com/kubeedge/kubeedge/pull/7029https://github.com/kubeedge/kubeedge/pull/7030https://github.com/kubeedge/kubeedge/releases/tag/v1.21.2https://github.com/kubeedge/kubeedge/releases/tag/v1.22.2https://github.com/kubeedge/kubeedge/releases/tag/v1.23.1