7.8Alta
CVE-2026-62146Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket
Descripción
A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside the container, enabling container escape.
Debilidad (CWE):
CWE-501
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| openshift | 4.16 | — | |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 5 | all versions |
Referencias y parches
- RHSA-2026:89713 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-62146 vdb-entry
- RHBZ#2499618 issue-tracking
- https://github.com/cri-o/cri-o/security/advisories/GHSA-6wmc-5877-hgc9