StackRadar

CVE-2025-12801

Medium

Advisory

Published 4 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
8
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
1 of 2
affected packages

Moderate: nfs-utils security update

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
nfs-utilsdeb1:2.6.2-4, 1:2.6.2-4+deb12u1, 1:2.8.3-1no fix listed6
nfs-utilsrpm1:2.5.4-34.el9, 1.0-150600.28.12.11:2.5.4-38.el9_7.3, 2.6.4-150600.28.19.13
OSV records
DEBIAN-CVE-2025-12801RLSA-2026:3940SUSE-SU-2026:1356-1

Charts affected

8 by stars
ChartLatestAffected imagesRadar Score
csi-driver-nfscsi-driver-nfsVerified publisher4.13.41 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2025-12801.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
nfs-utils@1:2.6.2-4+deb12u1
no fix listed

Open the chart page →

3,324
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2025-12801.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
nfs-utils@1:2.8.3-1
no fix listed

Open the chart page →

3,657
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-12801.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
nfs-utils@1:2.6.2-4
no fix listed

Open the chart page →

11,458
magentomagento3.2.32 of 12See more

magento magento 3.2.3

2 of the 12 container images this version deploys carry CVE-2025-12801.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
nfs-utils@1.0-150600.28.12.1
2.6.4-150600.28.19.1
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
nfs-utils@1.0-150600.28.12.1
2.6.4-150600.28.19.1

Open the chart page →

13,479
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-12801.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
nfs-utils@1:2.6.2-4+deb12u1
no fix listed

Open the chart page →

5,817
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2025-12801.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
nfs-utils@1:2.6.2-4+deb12u1
no fix listed

Open the chart page →

6,220
hammerspace-csihscsi1.2.81 of 6See more

hammerspace-csi hscsi 1.2.8

1 of the 6 container images this version deploys carry CVE-2025-12801.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
nfs-utils@1:2.5.4-34.el9
1:2.5.4-38.el9_7.3

Open the chart page →

4,441
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-12801.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
nfs-utils@1:2.6.2-4+deb12u1
no fix listed

Open the chart page →

7,081

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
nfs-utils@1:2.5.4-34.el9
1:2.5.4-38.el9_7.3
1
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
nfs-utils@1.0-150600.28.12.1
2.6.4-150600.28.19.1
1
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
nfs-utils@1.0-150600.28.12.1
2.6.4-150600.28.19.1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
nfs-utils@1:2.6.2-4
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
nfs-utils@1:2.6.2-4+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
nfs-utils@1:2.8.3-1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
nfs-utils@1:2.6.2-4+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
nfs-utils@1:2.6.2-4+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
nfs-utils@1:2.6.2-4+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.