amazon firecracker vulnerabilities (CVE)

CVE records published for amazon firecracker, newest first. Follow to get an email when a new one appears.

2 results
7.5High
CVE-2026-5747

Out-of-bounds Write in Firecracker virtio-pci Transport

AWS Firecracker

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on th…

6.0Medium
CVE-2026-1386

Arbitrary Host File Overwrite via Symlink in Firecracker Jailer

AWS Firecracker

A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink at…