Skip to content
OpenAdvisories

Product · containers

crun

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.6
    CVE-2026-88264

    Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs

    A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fallback. Affected versions are crun 1.29…

    Red Hat containers Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Alpine
  • Medium 5.1
    CVE-2026-47766

    crun follows rootfs /dev symlink while creating default devices

    crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs `/dev` directory without `O_NOFOLLOW`. If an OCI bundle contains `rootfs/dev` as a symlink and the bundle configurat…

    containers crun crun crun Debian Ubuntu Alpine