API Gateway Container PrivEsc via Host Access (CVE-2024-38487)
CVE-2024-38487 Published on June 16, 2026

api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2024-38487 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
HIGH

Weakness Type

Improper Privilege Management

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.


Affected Versions

Dell EMC VxRail Appliance: