SentinelOne researchers discovered two path traversal vulnerabilities in Kubernetes Container Storage Interface (CSI) drivers, stemming from a misconception in filepath.Join usage. These flaws could allow cross-tenant path traversal, enabling attackers to access or manipulate data outside their intended storage boundaries. This highlights a critical security risk in multi-tenant Kubernetes environments and the complexities of secure file path handling.