CVE-2026-41326
HIGHKata Containers: CopyFile Policy Subversion via Symlinks
Title source: cnaDescription
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0.
References (3)
Core 3
Core References
X_Refsource_Confirm x_refsource_confirm
https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc
X_Refsource_Misc x_refsource_misc
https://github.com/kata-containers/kata-containers/commit/1b9e49eb2763aa6ea6a99b276d3ff5e2c7f658f2
Scores
CVSS v3
8.2
EPSS
0.0029
EPSS Percentile
20.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-61
Status
published
Products (4)
kata-containers/kata-containers
0 - 0.0.0-20260422180503-1b9e49eb2763Go
kata-containers/kata-containers
>= 3.4.0, < 3.29.0
katacontainers/confidential_containers
0.9.0 - 0.20.0
katacontainers/kata_containers
3.4.0 - 3.29.0
Published
Apr 24, 2026
Tracked Since
Apr 24, 2026