CVE-2017-1002102

CVE-2017-1002102 is a medium-severity vulnerability affecting Kubernetes versions 1.3.x through 1.6.x, and specific earlier versions of 1.7, 1.8, and 1.9. It allows containers utilizing specific volume types (secret, configMap, projected, downwardAPI) to delete arbitrary files or directories on the host node. The vulnerability has a CVSS score of 5.6 (Medium), indicating a local attack vector with high attack complexity, low privileges required, and a high impact on integrity, with no impact on confidentiality or availability. This means an attacker with low-level access to a container could, with some difficulty, delete critical system files. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage. Community discussion is minimal, with only one mention identified, suggesting low current attention to this specific CVE.