CVE-2023-38496

Apptainer CVE-2023-38496 affects version 1.2.0-rc.2, where an ineffective privilege drop during container network setup causes subsequent functions to run with root privileges. This expands the attack surface to host filesystems if an attacker crafts a starter config to delete directories. The se...