Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
kubernetes-csi-driver-nfs-fips may allow unauthorized actions
published 5 months ago
Summary
The kubernetes-csi-driver-nfs-fips package in versions 4.12.1-r1 and 4.12.1-r2 contains several security gaps that could let attackers manipulate data or gain access they shouldn’t have. Updating to the newer release where these gaps are fixed removes the risk. Apply the latest version as soon as possible.
What to do
- Update cleanstart kubernetes-csi-driver-nfs-fips to version 4.12.1-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | kubernetes-csi-driver-nfs-fips |
< 4.12.1-r2 Fix: upgrade to 4.12.1-r2
|
Original advisory text
Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, ghsa-p77j-4mvh-x3m3, ghsa-r6j8-c6r2-37rr applied in versions: 4.12.1-r1, 4.12.1-r2
Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-61732 URL
- https://osv.dev/vulnerability/CVE-2025-68121 URL
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://osv.dev/vulnerability/CVE-2026-27143 URL
- https://osv.dev/vulnerability/CVE-2026-27144 URL
- https://osv.dev/vulnerability/CVE-2026-32280 URL
- https://osv.dev/vulnerability/CVE-2026-32281 URL
- https://osv.dev/vulnerability/CVE-2026-32282 URL
- https://osv.dev/vulnerability/CVE-2026-32283 URL
- https://osv.dev/vulnerability/CVE-2026-32289 URL
- https://osv.dev/vulnerability/CVE-2026-33810 URL
- https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3 URL
- https://osv.dev/vulnerability/ghsa-r6j8-c6r2-37rr URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61732 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27143 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27144 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32280 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32281 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32282 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32283 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32289 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33810 URL
Timeline
Published18 May 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-TC76376 · OSV
Track software like this
Free during beta