CVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI Driver
Efs Csi ยท 2026-10-21
Actions
Technical Details
| Affected Versions | <=3.4.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-85781 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the Amazon EFS CSI Driver to version v3.4.1 to address CVE-2026-85781, ensuring the --delete-access-point-root-dir option is either disabled or properly configured to prevent unauthorized deletions.
For Platform Teams
Deploy the updated Amazon EFS CSI Driver v3.4.1 across all Kubernetes environments to enhance security and maintain the integrity of Amazon EFS file systems.
For Executives
Implement the security patch for Amazon EFS CSI Driver to mitigate risk of unauthorized directory deletions, ensuring data integrity and compliance with security standards.
Source
Related Efs Csi Updates
- CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver (2026-10-19)
- CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver (2026-10-14)
- CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver (2026-10-02)
- CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver (2026-09-29)
- CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver (2026-09-25)