CVE-2026-41326
Medium
Elevated severity or exploit probability.
CVSS base
8.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS — probability of exploitation (30 days)
0.3%
28.4th percentile
CISA KEV
Not listed
Weakness / dates
CWE-1220
Published 2026-04-24 · modified 2026-08-24
CVSS breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
| Attack Vector | N | Network |
| Attack Complexity | L | Low |
| Privileges Required | N | None |
| User Interaction | N | None |
| Scope | U | Unchanged |
| Confidentiality | H | High |
| Integrity | L | Low |
| Availability | N | None |
Timeline
- 2026-04-24 — Published (NVD)
- 2026-08-24 — Last modified (NVD)
Description
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0.
Affected
References
- https://github.com/kata-containers/kata-containers/commit/1b9e49eb2763aa6ea6a99b276d3ff5e2c7f658f2
- https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc
- http://www.openwall.com/lists/oss-security/2026/05/13/2
- https://access.redhat.com/errata/RHSA-2026:25200
- https://access.redhat.com/security/cve/CVE-2026-41326
- https://bugzilla.redhat.com/show_bug.cgi?id=2460859
- https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41326.json