PT-2026-107188

A flaw was found in CRI-O's bind mount prefix handling. When configured with a non-empty bind mount prefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve...