PT-2026-43453 · Unknown · Kata Containers
CVE-2026-44210
·
Published
2026-05-26
·
Updated
2026-07-30
CVSS v4.0
6.5
Medium
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
Kata Containers version 3.28.0
Description
Kata Containers allows pod creators to inject arbitrary command-line arguments into the
virtiofsd process via the io.katacontainers.config.hypervisor.virtio fs extra args pod annotation. Because the runtime does not validate or filter the values of this annotation, an attacker can use the -o source=/ argument to override the shared directory and serve the entire host root filesystem into the guest VM. By combining this with the io.katacontainers.config.hypervisor.kernel params annotation to enable the agent debug console, an attacker can obtain a root shell inside the VM and mount the host filesystem to read or write any file on the host, such as /etc/shadow. This can lead to full host compromise, including access to other containers and the Kubernetes control plane.Recommendations
As a temporary workaround, remove
virtio fs extra args and kernel params from the enable annotations list in the configuration.toml file to prevent the injection of arbitrary arguments and the activation of the debug console.Exploit
Fix
Argument Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kata Containers