Skip to content
OpenAdvisories

Vendor

containers

10 known vulnerabilities.

Products

crun 4 bubblewrap 2 fuse-overlayfs 1 aardvark-dns 1 buildah 1 podman 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-41163

    bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

    bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. …

    containers bubblewrap bubblewrap bubblewrap Debian Ubuntu
  • High 8.5
    CVE-2025-24965

    .krun_config.json symlink attack creates or overwrites file on the host in crun

    crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are ne…

    containers crun crun crun Ubuntu Alpine
  • High 7.2
    CVE-2020-5291

    Privilege escalation in setuid mode via user namespaces in Bubblewrap

    Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable. This can in turn be…

    containers bubblewrap bubblewrap bubblewrap Debian Ubuntu Alpine