An update for kubernetes is now available for openEuler-24.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4463 Final 1.0 1.0 2026-10-22 Initial 2026-10-22 2026-10-22 openEuler SA Tool V1.0 2026-10-22 kubernetes security update An update for kubernetes is now available for openEuler-24.03-LTS-SP4 Container cluster management. Security Fix(es): A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in the container is malicious, it can execute arbitrary code and emit unexpected output, allowing an attacker who controls container contents to write files to arbitrary paths on the user's local machine when kubectl cp is invoked, limited only by the system permissions of the local user. This issue only affects kubectl clients running on Windows.(CVE-2026-19444) An update for kubernetes is now available for openEuler-24.03-LTS-SP4. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium kubernetes https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4463 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-19444 https://nvd.nist.gov/vuln/detail/CVE-2026-19444 openEuler-24.03-LTS-SP4 kubernetes-1.29.1-19.oe2403sp4.aarch64.rpm kubernetes-client-1.29.1-19.oe2403sp4.aarch64.rpm kubernetes-help-1.29.1-19.oe2403sp4.aarch64.rpm kubernetes-kubeadm-1.29.1-19.oe2403sp4.aarch64.rpm kubernetes-kubelet-1.29.1-19.oe2403sp4.aarch64.rpm kubernetes-master-1.29.1-19.oe2403sp4.aarch64.rpm kubernetes-node-1.29.1-19.oe2403sp4.aarch64.rpm kubernetes-1.29.1-19.oe2403sp4.src.rpm kubernetes-1.29.1-19.oe2403sp4.x86_64.rpm kubernetes-client-1.29.1-19.oe2403sp4.x86_64.rpm kubernetes-help-1.29.1-19.oe2403sp4.x86_64.rpm kubernetes-kubeadm-1.29.1-19.oe2403sp4.x86_64.rpm kubernetes-kubelet-1.29.1-19.oe2403sp4.x86_64.rpm kubernetes-master-1.29.1-19.oe2403sp4.x86_64.rpm kubernetes-node-1.29.1-19.oe2403sp4.x86_64.rpm A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary in the container is malicious, it can execute arbitrary code and emit unexpected output, allowing an attacker who controls container contents to write files to arbitrary paths on the user's local machine when kubectl cp is invoked, limited only by the system permissions of the local user. This issue only affects kubectl clients running on Windows. 2026-10-22 CVE-2026-19444 openEuler-24.03-LTS-SP4 Medium 6.5 AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N kubernetes security update 2026-10-22 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4463