---
id: CVE-2020-8567
aliases:
  - GHSA-2v35-wj4r-rcmv
  - GO-2024-2750
title: Kubernetes Secrets Store CSI Driver plugins arbitrary file write
summary: Kubernetes Secrets Store CSI Driver plugins arbitrary file write
severity: medium
cvss: 4.9
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L'
vendor: hashicorp
product: github.com/hashicorp/vault-csi-provider
ecosystem: go
affected:
  - github.com/hashicorp/vault-csi-provider < 0.0.6
  - github.com/Azure/secrets-store-csi-driver-provider-azure < 0.0.10
  - github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp < 0.2.0
patched:
  - github.com/hashicorp/vault-csi-provider 0.0.6
  - github.com/Azure/secrets-store-csi-driver-provider-azure 0.0.10
  - github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp 0.2.0
published: '2022-05-24'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:49:37.173343782Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-2v35-wj4r-rcmv'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2020-8567'
  - url: 'https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384'
  - url: 'https://github.com/Azure/secrets-store-csi-driver-provider-azure/pull/298'
  - url: >-
      https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/pull/74
  - url: >-
      https://github.com/hashicorp/secrets-store-csi-driver-provider-vault/pull/50
  - url: >-
      https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHY
tags:
  - osv
  - go
epss: 0.01381
epssPercentile: 0.70965
ingestedAt: '2026-09-12T03:13:01.746Z'
---

## Overview

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including `/var/lib/kubelet/pods`.

## Affected packages

- `github.com/hashicorp/vault-csi-provider < 0.0.6`
- `github.com/Azure/secrets-store-csi-driver-provider-azure < 0.0.10`
- `github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp < 0.2.0`

## Remediation

Upgrade to a patched release:

- `github.com/hashicorp/vault-csi-provider 0.0.6`
- `github.com/Azure/secrets-store-csi-driver-provider-azure 0.0.10`
- `github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp 0.2.0`