Kata Containers: Host Operator Elevates Priv via CreateContainer Mount Validation
CVE-2026-77176 Published on August 20, 2026
Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy
A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content, potentially exposing confidential information or enabling the acceptance of attacker-controlled input.
Vulnerability Analysis
CVE-2026-77176 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Timeline
Reported to Red Hat.
Made public. 3 days later.
Weakness Type
External Control of File Name or Path
The software allows user input to control or influence paths or file names that are used in filesystem operations.
Products Associated with CVE-2026-77176
Want to know whenever a new CVE is published for Red Hat Openshift? stack.watch will email you.
