---
id: "GHSA-pv26-6q9q-5773"
kind: "vulnerability"
aliases: ["GHSA-pv26-6q9q-5773"]
title: "CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["aws", "eks", "infrastructure", "kubernetes", "lab-disclosure", "storage"]
not_affected_if: ["admin-only-pv-creation", "patched-driver"]
published_at: null
first_seen_at: "2026-10-24T18:43:45+00:00"
updated_at: "2026-10-25T04:51:41+00:00"
sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-120-aws/", "first_seen_at": "2026-10-24T18:43:45+00:00"}]
---

# CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver

The Amazon EFS CSI Driver lets a user with PersistentVolume creation rights inject extra mount options through the mounttargetipmap volumeAttribute, because comma-separated values appended inside that JSON map are parsed as separate mount options. An attacker can therefore pass arbitrary mount options to the mount utility on the node.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed driver version (`aws-efs-csi-driver` image tag or Helm chart `appVersion`); affected versions are `v3.1.0` through `v3.4.2`.
- List PersistentVolumes and StorageClasses that set `mounttargetipmap` and confirm only cluster administrators can create them.

## Fix

- Upgrade the Amazon EFS CSI Driver to `v3.5.0` or later.
- Restrict PersistentVolume and StorageClass creation to cluster administrators with Kubernetes RBAC.
- Patch any forked or derivative copies of the driver code.

## Timeline

- 2026-10-24T18:43:45+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-120-aws/ — AWS: CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver

## Documents

- [advisory] AWS: CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver https://aws.amazon.com/security/security-bulletins/rss/2026-120-aws/

## From the sources

CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver

### CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver

Bulletin ID: 2026-120-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 08:30 AM PDT

Description:

The Amazon EFS CSI Driver is a Container Storage Interface driver that allows Kubernetes clusters to use Amazon Elastic File System. We identified CVE-2026-103505, where an actor with PersistentVolume creation privileges can inject additional mount options through the mounttargetipmap volumeAttribute. Appending comma-separated values to a value inside that JSON map causes the mount utility to parse them as separate mount options.

Impacted versions: >= v3.1.0 AND <= v3.4.2

Resolution:

This issue has been addressed in Amazon EFS CSI Driver version v3.5.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds:

Restrict PersistentVolume and StorageClass creation to cluster administrators using Kubernetes RBAC, preventing untrusted users from supplying arbitrary field values.

References:

- CVE-2026-103505
- GHSA-pv26-6q9q-5773

 Please email aws-security@amazon.com with any security questions or concerns..

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_