64 matches found
CopyFail-Scanner-CVE-2026-31431
CopyFail-Scanner-CVE-2026-31431 CopyFail-Scanner is a tool that identifies the CopyFile vulnerability CVE-2026-31431. Enumerates the system Assesses exposure to the vulnerability Indicates the status vulnerable/not vulnerable Suggests and, optionally, executes a secure update based on the distro...
CVE-2026-100838 Contrast before 1.19.1 CopyFile Policy Symlink Subversion
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to...
CVE-2026-100838 Contrast before 1.19.1 CopyFile Policy Symlink Subversion
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to...
CVE-2026-100838
The Contrast confidential-computing runtime for Kubernetes (versions before 1.19.1 ) contains a flaw in the CopyFile verification of policies generated by the Contrast CLI. This vulnerability allows a malicious process on an untrusted host, capable of connecting to the Kata agent VSOCK , to issue...
CVE-2026-100838 Contrast before 1.19.1 CopyFile Policy Symlink Subversion
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to...
CVE-2026-100838
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to...
CVE-2026-100838: Improper Link Resolution Before File Access
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to...
SUSE CVE-2026-41326
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy and perhaps the CopyFile handler allows untrusted hosts to write to arbitrary locations...
GO-2026-5624 Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast...
Improper Access Control
Kata Containers is vulnerable to Improper Access Control. The vulnerability is due to an oversight in the CopyFile policy and/or handler, which allows an untrusted host to write files to arbitrary locations within the guest workload image, enabling an attacker to overwrite binaries, compromise...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CopyFileC...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CopyFail-Scanner-CVE-2026-31431 CopyFail-Scanner es una herram...
CVE-2026-41326
A flaw was found in Kata Containers. An oversight in the CopyFile policy and perhaps the CopyFile handler allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those...
Kata Container has CopyFile Policy Subversion via Symlinks
Summary An oversight in the CopyFile policy and perhaps the CopyFile handler allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. Details...
GHSA-Q49M-57VM-C8CC Kata Container has CopyFile Policy Subversion via Symlinks
Summary An oversight in the CopyFile policy and perhaps the CopyFile handler allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. Details...
Contras Affected by CopyFile Policy Subversion via Symlinks
Impact The Kata agent policies generated by the Contrast CLI had an issue in the CopyFile verification, which allowed arbitrary writes to the guest root filesytem. A malicious process on the host with the capability to connect to the Kata agent VSOCK could connect to the agent and issue a series ...
GHSA-RH99-WC69-C255 Contras Affected by CopyFile Policy Subversion via Symlinks
Impact The Kata agent policies generated by the Contrast CLI had an issue in the CopyFile verification, which allowed arbitrary writes to the guest root filesytem. A malicious process on the host with the capability to connect to the Kata agent VSOCK could connect to the agent and issue a series ...
PT-2026-39556
Impact The Kata agent policies generated by the Contrast CLI had an issue in the CopyFile verification, which allowed arbitrary writes to the guest root filesytem. A malicious process on the host with the capability to connect to the Kata agent VSOCK could connect to the agent and issue a series ...
PT-2026-99458
Name of the Vulnerable Software and Affected Versions Contrast versions prior to 1.19.1 Description Kata agent policies generated by the Contrast CLI contain a flaw in the CopyFile verification process. This allows arbitrary writes to the guest root filesystem. A malicious process on an untrusted...
CVE-2026-41326
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy and perhaps the CopyFile handler allows untrusted hosts to write to arbitrary locations...