CVE-2026-30892: falha em containers crun
Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 0epss 0.2%
crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
Produtos afetados
containers · crunCVEs relacionadas — containers crun
No mesmo produto, das mais perigosas para as menos.
CVE-2025-24965HIGH.krun_config.json symlink attack creates or overwrites file on the host in crunEPSS 0.6%CVE-2026-47766MEDIUMcrun follows rootfs /dev symlink while creating default devicesEPSS 0.2%CVE-2026-88264MEDIUMCrun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfsEPSS 0.1%