AWS EFS CSI Driver Mount Option Injection Vulnerability

A vulnerability in the AWS EFS CSI Driver prior to version 3.0.1 allows remote authenticated users with permissions to create PersistentVolumes to inject arbitrary mount options through comma-separated values. This injection occurs via two unsanitized fields: the Access Point ID in volumeHandle and the mounttargetip volumeAttribute. The mount utility interprets the injected values as separate options, which are then applied to the filesystem mount without proper authorization.

Impact

Exploitation of this vulnerability allows for unauthorized injection of mount options, which could be used to manipulate how the filesystem is mounted, potentially leading to unauthorized access or modification of data.

Remediation

Users should upgrade to AWS EFS CSI Driver version 3.0.1 or later. For those using a forked or derivative version of the driver, ensure that it is patched to include the latest fixes.