CVE-2026-41326Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.
Updated under an hour ago ()
Does this affect you?
It affects katacontainers confidential_containers and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0.
- CVSS
- 8.2 HIGH (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
- Weakness (CWE)
- CWE-61, CWE-1220
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Modified
- Record last updated
- Aug 24, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
katacontainers confidential_containers katacontainers:confidential_containers | from 0.9.0 before 0.20.0 | NVD |
katacontainers kata_containers katacontainers:kata_containers | from 3.4.0 before 3.29.0 | NVD |
References
- https://github.com/kata-containers/kata-containers/commit/1b9e49eb2763aa6ea6a99b276d3ff5e2c7f658f2patch
- https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8ccthird-party-advisory
- http://www.openwall.com/lists/oss-security/2026/05/13/2mailing-list, third-party-advisory
- https://access.redhat.com/errata/RHSA-2026:25200
- https://access.redhat.com/security/cve/CVE-2026-41326
- https://bugzilla.redhat.com/show_bug.cgi?id=2460859
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41326.json
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.