CVE-2026-D0cker

CVE-2026-Pending: 通过 runC maskPaths 漏洞实现容器逃逸 严重级别: 严重 CVSS 9.8 组件: opencontainers/runc libcontainer 漏洞类型: CWE-59: 在访问文件前未正确解析链接（'链接跟随'） 🚨 执行摘要 runc 的 maskPaths 函数存在一个严重漏洞。当在容器内屏蔽敏感路径（如 /proc/kcore）时，runc 使用了 os.OpenFilepath, OPATH, 0 但没有添加 ONOFOLLOW 标志。这允许恶意容器进程将目标路径替换为指向敏感主机文件（例如...

EUVD-2026-67129

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

AZL-95985 CVE-2026-47766 affecting package crun 1.24-6

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...