8.2highHigh
CVE-2026-41326
Katacontainers Confidential Containers
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0.
Exploitation status
- A vendor advisory or patch reference has been published.
What the metrics mean
- It is reachable over a network, without needing local access.
- For an attacker who can reach it, no special conditions are needed to exploit it.
- To exploit it, no account is needed.
- Beyond that, no action by a user is required.
Scoring
- CVSS
- 8.2 (v3.1)
- Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N- CVSS v4
- 8.2
- Weakness
- CWE-61
- Assigned by
- security-advisories@github.com
Dates
- Published
- 2026-04-24
- Last modified
- 2026-08-24
- Sources
- NVD
Affected products
- Katacontainers Confidential Containers0.9.0 - 0.20.0
- Katacontainers Kata Containers3.4.0 - 3.29.0
As listed in the NVD configuration data. Not a statement about your estate.
References
- https://github.com/kata-containers/kata-containers/commit/1b9e49eb2763aa6ea6a99b276d3ff5e2c7f658f2
- https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc
- http://www.openwall.com/lists/oss-security/2026/05/13/2
- https://access.redhat.com/errata/RHSA-2026:25200
- https://access.redhat.com/security/cve/CVE-2026-41326
- https://bugzilla.redhat.com/show_bug.cgi?id=2460859
- https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41326.json