CVE-2026-76061 Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass

A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...

CVE-2026-76061

A flaw in CRI-O 's bind_mount_prefix handling allows a malicious container or local attacker to bypass prefix restrictions. By using a Container Runtime Interface (CRI) hostPath containing an intermediate absolute symlink, an attacker can cause the bind mount source to resolve outside the intende...

EUVD-2026-93915

A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...

CVE-2026-76061

A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...