GO-2026-4425
NoneCVSS
—
EPSS
—
Published
Feb 5, 2026
CISA due date
—
The record
Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern in github.com/rancher/local-path-provisioner
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/rancher/local-path-provisioner | 0 | 0.0.34 |