PT-2026-20867 · Cloud Hypervisor+1 · Cloud Hypervisor+1

Kostya-Oai · Published 2026-02-19 · Updated 2026-03-06 · CVE-2026-24834

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kata Containers versions prior to 3.27.0

Description Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. An issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM, potentially achieving arbitrary code execution as root within the guest VM. The issue does not impact the security of the Host or other containers/VMs running on the same Host. Exploitation requires the CAP MKNOD capability. This allows a malicious actor to elevate privileges within the guest virtual machine and gain full control of the guest environment.

Recommendations Upgrade to Kata Containers version 3.27.0 or later.

Exploit

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

AZL-77976

CVE-2026-24834

GHSA-WWJ6-VGHV-5P64

GO-2026-4517

SUSE-SU-2026:0757-1

Affected Products

Cloud Hypervisor

Kata Containers

References · 123

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24834.json · Exploit
• https://github.com/kata-containers/kata-containers/commit/6a672503973bf7c687053e459bfff8a9652e16bf · Patch
• https://github.com/kata-containers/kata-containers/security/advisories/GHSA-wwj6-vghv-5p64 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-77976 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24834 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wwj6-vghv-5p64 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4517 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0757-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24834 · Security Note
• https://github.com/kata-containers/kata-containers · Note
• https://github.com/kata-containers/kata-containers/releases/tag/3.27.0 · Note
• https://suse.com/security/cve/CVE-2026-25120 · Note
• https://suse.com/security/cve/CVE-2026-26995 · Note
• https://suse.com/security/cve/CVE-2026-26957 · Note
• https://suse.com/security/cve/CVE-2025-67860 · Note