CVEvulnerability
CVE-2026-76061
5.5 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-10-06
- Last modified
- 2026-10-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
- Weaknesses
- CWE-59
Description
A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malicious container or local attacker could use a Container Runtime Interface (CRI) hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outside the intended prefixed root, potentially leading to unauthorized access to files or privilege escalation on the host system.
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- https://access.redhat.com/security/cve/CVE-2026-76061 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2520330 bugzilla.redhat.com
- https://github.com/cri-o/cri-o/commit/01f90366dc8c8db0df32b4aae7fd067c1eddbb70 github.com
- https://github.com/cri-o/cri-o/commit/6d08a9a60ecfabdb3cbea0c8d698e31f1f01cb40 github.com
- https://github.com/cri-o/cri-o/commit/d6f58973acfcae93ecc039e0297fbe5f2548b46b github.com