EUVD-2026-84005
GHSA-9vm9-pqxx-x83v
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCompromise or substitute component download source
-
DeliveryPlant tar.gz with ../ backslash/drive-prefix entries
-
ExploitOperator runs keadm join on Windows edge node
-
ExecutionDecompressTarGz writes entry outside target dir
-
PersistOverwrite service/executable/config file
-
ImpactPersistent modification or code execution
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires all of: (1) the KubeEdge component archive to originate from a compromised, replaced, or untrusted download source rather than the official signed release - the archive itself must be attacker-controlled; (2) a victim operator actively running keadm join or installation (UI:R) on a Windows edge node - the flaw is specifically triggered by Windows-style backslashes, absolute, and drive-prefixed paths in the tar entries; and (3) affected keadm version 1.16.0 through the fixed 1.21.2/1.22.2/1.23.1. Limiting factors: exploitation does NOT occur against official/trusted artifact sources, needs human interaction to launch the install, is scoped to Windows edge nodes, and grants only the privileges the keadm process itself runs with (no confidentiality impact). |
| Impact | The vendor CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H = 8.1 High) presents this as a high-integrity/high-availability flaw, but the description reveals a critical gating precondition that AC:L understates: exploitation requires the archive to arrive from a 'compromised, replaced, or untrusted download source.' Against KubeEdge's normal signed/official artifact sources this does not trigger - it is effectively a supply-chain trust-boundary bug requiring the attacker to first control or substitute the download source and then have a victim run keadm join/install (UI:R). I assess AC:H is more honest than AC:L given that source-compromise prerequisite. There is no EPSS score, no CISA KEV listing, and no public exploit code identified at time of analysis, so this is not evidence of active exploitation - it is a defense-in-depth hardening fix. No SSVC decision framework data was supplied. Net: a legitimately impactful bug (write/overwrite of executables/config/service files → persistence or code execution) but NOT a drop-everything priority - the untrusted-source and user-interaction requirements plus the Windows-edge-node scope make it a targeted/opportunistic rather than mass-exploitable issue. Note also C:N - there is no confidentiality impact, only integrity/availability. |
| Exploit ScenarioDerived | An attacker compromises or man-in-the-middles the download source (mirror, package host, or CDN) serving the KubeEdge component archive, replacing it with a malicious tar.gz whose entries use ../ sequences, Windows backslashes, or a drive-prefixed absolute path. When an operator runs keadm join or installation on a Windows edge node, DecompressTarGz writes those entries outside the intended directory, overwriting a service binary or config with the keadm process's privileges - yielding persistence or code execution. No public proof-of-concept is identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 21, 2026
KubeEdge keadm releases from 1.16.0 before 1.21.2, 1.22.2, and 1.23.1 contain a path traversal in DecompressTarGz that, on Windows edge nodes, can extract archive entries with parent-directory sequences, backslashes, absolute paths, or drive prefixes outside the intended destination. Exploitation requires the operator to run keadm join or installation using an archive obtained from a compromised, replaced, or untrusted download source, making this primarily a supply-chain trust-boundary bug rather than an attack against official artifacts. No public exploit was identified at time of analysis, and vendor fixes are released in 1.21.2, 1.22.2, and 1.23.1.
RemediationAI
Vendor-released patch: 1.21.2, 1.22.2, and 1.23.1; upgrade keadm to the appropriate fixed release for the deployed KubeEdge branch using the vendor advisory at https://github.com/kubeedge/kubeedge/security/advisories/GHSA-9vm9-pqxx-x83v and the release notes at https://github.com/kubeedge/kubeedge/releases/tag/v1.21.2, https://github.com/kubeedge/kubeedge/releases/tag/v1.22.2, and https://github.com/kubeedge/kubeedge/releases/tag/v1.23.1. Until upgrading, obtain KubeEdge archives only from official signed release sources and verify checksums or signatures before running keadm join/install, because the exploit requires an attacker-influenced archive; using internal mirrors or third-party tarballs carries residual risk and should be avoided unless the artifacts are independently validated. Limit the privileges used to run keadm on Windows edge nodes and restrict write access to configuration, executable, and service paths where operationally feasible; these compensating controls can reduce impact if a crafted archive is extracted but may hinder legitimate edge provisioning and upgrade workflows.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 4 packages in go, euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
KubeEdge keadm is the command-line lifecycle utility used to bootstrap and join edge nodes; the vulnerable DecompressTarGz function in keadm/cmd/keadm/app/cmd/util/common.go joins tar.gz archive entry names to the extraction destination without sufficient canonicalization or rejection of traversal sequences. The root cause is CWE-22, with Windows-specific parsing complications: backslashes, drive-prefixed paths, and absolute paths can escape the intended directory and cause the keadm process to write or overwrite files with its own privileges. The independent assessment rates this CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H, adjusting the vendor AC:L to AC:H because the attacker must first control, replace, or substitute the download source and then induce an operator to run keadm join or install on a Windows edge node. The C:N reflects no confidentiality impact, while I:H/A:H reflect potential modification of configuration, executable, or service files leading to persistence or code execution. References include advisory GHSA-9vm9-pqxx-x83v, PRs 7028-7030, commits 47767b7f2649afcfa3a856e87d556f7777e0428d, a524a66a1ae1691eb8ff16b6ff9a93fb370d4047, and ee02dea9d08114afc4a8f401b1c2f30e84e1de40, plus CHANGELOG-1.21/1.22/1.23 and release tags v1.21.2, v1.22.2, and v1.23.1. The provided source-code evidence from PR 7028 shows related admission-controller validation hardening (version/image validation and patch operation changes), while the CVE description attributes the path traversal to DecompressTarGz.
Know when Kubeedge gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Archive delivered over network (AV:N) but attacker must first compromise/substitute the download source and victim must run keadm (AC:H, UI:R); write/overwrite yields I:H/A:H, no data disclosure (C:N).
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
2DescriptionCVE.org
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.16.0 until 1.21.2, 1.22.2, and 1.23.1, the DecompressTarGz function in keadm/cmd/keadm/app/cmd/util/common.go joins archive entry names to the extraction destination without sufficient validation. During keadm join or installation on Windows edge nodes, an archive influenced through a compromised, replaced, or untrusted download source can contain parent-directory components, Windows-style backslashes, absolute paths, or drive-prefixed paths that escape the intended directory. The affected keadm process can consequently write or overwrite files with its own privileges, potentially modifying configuration, executable, or service files and enabling persistent system modification or code execution. This issue is fixed in versions 1.21.2, 1.22.2, and 1.23.1.
Technical POC Analysis
Evidence basis: GitHub Security Advisory GHSA-9vm9-pqxx-x83v and the CVE-2026-62369 description.
Full technical POC analysis - root cause, step-by-step exploitation and patch breakdown - is part of the Pro and Business plans.
Executive ViewAI
KubeEdge keadm, used for deploying and managing edge nodes, has a high-severity path traversal vulnerability affecting Windows edge nodes. Organizations using keadm versions 1.16.0 through 1.21.1, 1.22.0-1.22.1, or 1.23.0 could be impacted if installation archives are obtained from compromised or untrusted sources, allowing attackers to write files outside intended directories. No public exploit identified at time of analysis, but the supply-chain nature and potential for node compromise warrant leadership attention.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Unauthenticated integrity manipulation in KubeEdge CloudCore through 1.23.1 allows any network-reachable attacker to sub
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at
KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to ho
Shell command injection in KubeEdge's v1alpha2 NodeUpgradeJob upgrade workflow allows an authenticated user who holds RB
Authenticated command injection in KubeEdge (1.21.0 up to 1.21.2, 1.22.2, and 1.23.1) lets a principal holding Kubernete
Memory exhaustion in KubeEdge CloudHub (versions 1.0.0 through 1.21.1, 1.22.0 through 1.22.1, and 1.23.0) allows an auth
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at
KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to ho
Exploit-DB