Bulletin ID: 2026-120-AWSScope: AWSContent Type: Important (requires attention)Publication Date: 10/01/2026 08:30 AM PDTDescription:The Amazon EFS CSI Driver is a Container Storage Interface driver that allows Kubernetes clusters to use Amazon Elastic File System. We identified CVE-2026-103505, where an actor with PersistentVolume creation privileges can inject additional mount options through the mounttargetipmap volumeAttribute. Appending comma-separated values to a value inside that JSON map causes the mount utility to parse them as separate mount options.Impacted versions: >= v3.1.0 AND <= v3.4.2Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.