Search: CVE-2026-85781

CVE-2026-85781 is a vulnerability in the Amazon EFS CSI Driver before version 3.4.1 where unverified ownership of a storage access point in the volume deletion component allows an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized to access. This occurs via a crafted PersistentVolume volumeHandle that mismatches an access point and target filesystem. The issue is fixed in version 3.4.1.