CVE-2026-D0cker

CVE-2026-Pending: Container Escape via runC maskPaths Vunlerability Severity: Critical CVSS 9.8 Component: opencontainers/runc libcontainer Vulnerability Type: CWE-59: Improper Link Resolution Before File Access 'Link Following' 🚨 Executive Summary A critical vulnerability exists in runc's...

AlmaLinux 9.2 [TuxCare] Security Update: runc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1763489872)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763489872 advisory. - runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfslinux.go. To...

ANT-2026-N6TD9MF6 · runc · Symlink-following

symlink-following medium CVE-2026-41579 GHSA-xjvp-4fhw-gc47 Severity Claude high · Security research firm high · Maintainer medium Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics...

libcontainer/user/user.go Privilege Escalation

The vulnerability of the libcontainer/user/user.go implementation, a tool for running isolated containers in Runc, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...

Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container,...

Race Condition Enabling Link Following

Overview github.com/opencontainers/runc/libcontainer is a package for a modern container runtime. Affected versions of this package are vulnerable to Race Condition Enabling Link Following in the handling of procfs file writes. An attacker can cause arbitrary writes to sensitive files or trigger ...

Race Condition Enabling Link Following

Overview github.com/opencontainers/runc/libcontainer is a package for a modern container runtime. Affected versions of this package are vulnerable to Race Condition Enabling Link Following due to insufficient checks when bind-mounting /dev/pts/$n to /dev/console inside the container. An attacker...

EUVD-2025-7244

Malicious code in bioql PyPI...

EUVD-2022-1002

Malicious code in bioql PyPI...

SUSE CVE-2025-27612

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...

CVE-2025-27612

A flaw was found in libcontainer. This vulnerability may allow elevation of capabilities via improper inheritance of capabilities in the tenant container when using the tenant builder. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

Libcontainer is affected by capabilities elevation similar to GHSA-f3fp-gc8g-vw66

Impact In libcontainer, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. Code can be seen here . The logic here adds the given capabilities to all capabilities of main container if present in spec, otherwise simply s...

youki (0.0.4) potentially affected by CVE-2025-27612 via libcontainer (0.0.4)

libcontainer CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcontainer and may be impacted: - youki 0.0.4 Source cves: CVE-2025-27612 Source advisory: OSV:GHSA-5W4J-F78P-4WH9...

GHSA-5W4J-F78P-4WH9 Libcontainer is affected by capabilities elevation similar to GHSA-f3fp-gc8g-vw66

Impact In libcontainer, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. Code can be seen here . The logic here adds the given capabilities to all capabilities of main container if present in spec, otherwise simply s...

CVE-2025-27612

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...

CVE-2025-27612

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...

CVE-2025-27612 Libcontainer is affected by capabilities elevation

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...

CVE-2025-27612

CVE-2025-27612 is a youki/libcontainer issue where the tenant_builder incorrectly adds provided capabilities to the main container’s spec, potentially elevating capabilities in the tenant container. The vulnerability is in libcontainer prior to 0.5.3 and would affect users who directly use the te...

CVE-2025-27612 Libcontainer is affected by capabilities elevation

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...

CVE-2025-27612 Libcontainer is affected by capabilities elevation

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if prese...