CVE-2026-6437

CVE-2026-6437 is a medium-severity vulnerability in AWS EFS CSI Driver versions prior to v3.0.1 that allows improper handling of argument delimiters in the volume component. An authenticated attacker with PersistentVolume creation permissions can exploit a comma injection flaw to inject arbitrary mount options, potentially compromising system security and data integrity. The vulnerability affects the Kubernetes storage integration layer for AWS Elastic File System. The vulnerability carries a CVSS score of 6.5 (Medium) with a network attack vector, low complexity, and high privilege requirements. While the attack requires authenticated access and administrative permissions to create PersistentVolumes, successful exploitation could result in high confidentiality and integrity impacts, though availability is not affected. The relatively low EPSS score of 0.00038 indicates minimal observed exploitation activity compared to other disclosed vulnerabilities. There are currently no reports of active exploitation, and the vulnerability is not listed on the Known Exploited Vulnerabilities (KEV) catalog. The issue remains on an inactive hot list with low community attention. Organizations should prioritize upgrading AWS EFS CSI Driver to version v3.0.1 or later to remediate this risk, particularly in environments where untrusted users have permissions to create or modify PersistentVolumes.