EUVD-2026-87849

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

PT-2026-29926

Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast...

PT-2026-99459

Name of the Vulnerable Software and Affected Versions Contrast versions prior to 1.18.0 Description The guest kernel's ACPI/AML handling is susceptible to an AML injection attack known as BadAML. ACPI tables containing AML bytecode are transmitted from the untrusted host QEMU to the guest firmwar...