7.8Hoch
CVE-2026-62146Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket
Beschreibung
A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside the container, enabling container escape.
Schwachstellentyp (CWE):
CWE-501
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| openshift | 4.16 | — | |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 5 | all versions |
Referenzen und Patches
- RHSA-2026:89713 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-62146 vdb-entry
- RHBZ#2499618 issue-tracking
- https://github.com/cri-o/cri-o/security/advisories/GHSA-6wmc-5877-hgc9