PT-2026-42534 · Kata Containers · Runtime-Rs

Published 2026-05-21 · Updated 2026-05-28 · CVE-2026-47243

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:P

Name of the Vulnerable Software and Affected Versions Kata Containers runtime-rs versions prior to 3.31.0

Description A symlink escape exists when virtiofsd is run as root with the flags --sandbox none and --seccomp none. A raw FUSE SYMLINK request allows a guest root user to create symlinks owned by the host root in sensitive host paths. FUSE (Filesystem in Userspace) is a mechanism that allows non-privileged users to create their own file systems without editing kernel code.

Recommendations Update to version 3.31.0.

Fix

Path traversal

Weakness Enumeration

CWE-36

CWE-22

Related Identifiers

CVE-2026-47243

GHSA-2GV2-CFFP-J227

Affected Products

Runtime-Rs

References · 8

• https://osv.dev/vulnerability/GHSA-2gv2-cffp-j227 · Vendor Advisory
• https://github.com/kata-containers/kata-containers/releases/tag/3.31.0 · Note
• https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227 · Note
• https://github.com/kata-containers/kata-containers · Note
• https://github.com/kata-containers/kata-containers/commit/ffa59ce3aa7877d067c9a372df0c329a23a01744 · Note
• https://twitter.com/the_yellow_fall/status/2059810134914658352 · Twitter Post
• https://twitter.com/oss_security/status/2058056040768209360 · Twitter Post
• https://twitter.com/nanovms/status/2057535718055129562 · Twitter Post