OESA-2026-1433 kata-containers security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.26.0, when a contain...

OESA-2026-1437 kata-containers security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.26.0, when a contain...

OESA-2026-1436 kata-containers security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.26.0, when a contain...

OESA-2026-1435 kata-containers security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.26.0, when a contain...

OESA-2026-1434 kata-containers security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.26.0, when a contain...

GHSA-PHWH-4F42-GWF3 Beszel: Docker API has a Path Traversal Vulnerability via Unsanitized Container ID

Summary The hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URLs using fmt.Sprintf with the raw value instead of...

CVE-2026-25727 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2026-25727 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

CVE-2025-11065 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2025-11065 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

CVE-2025-65637 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2025-65637 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2026-24834 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5

CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5. A patched version of the package is available...

GO-2026-4517 Kata Container to Guest micro VM privilege escalation in github.com/kata-containers/kata-containers/src/runtime

Kata Container to Guest micro VM privilege escalation in github.com/kata-containers/kata-containers/src/runtime...

CVE-2026-27007

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, normalizeForHash in src/agents/sandbox/config-hash.ts recursively sorted arrays that contained only primitive values. This made order-sensitive sandbox configuration arrays hash to the same value even when order changed. In OpenClaw...

Tanium Cloud Workloads 安全漏洞

Tanium Cloud Workloads is a security and management module provided by the American company Tanium. There is a security vulnerability present in Tanium Cloud Workloads, which stems from an attacker who may be allowed access to Tanium client containers, capable of executing denial-of-service attac...

AZL-77976 CVE-2026-24834 affecting package kata-containers 3.19.1.kata2-4

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM...

CVE-2026-24834

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via modification of the file system within the guest virtual machine. An attacker can execute arbitrary code with elevated privileges by leveraging local access to a container...

CVE-2026-24834 Kata Container to Guest micro VM privilege escalation

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM...

CVE-2026-24834 Kata Container to Guest micro VM privilege escalation

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM...

CVE-2026-24834

CVE-2026-24834 affects Kata Containers before 3.27.0. A flaw in the interaction with Cloud Hypervisor allows a container user to modify the Guest micro VM’s filesystem, potentially achieving arbitrary code execution as root inside the VM. The host and other containers/VMs on the same host are not...