CVE-2026-100838

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to...

CVE-2026-100838

The Contrast confidential-computing runtime for Kubernetes (versions before 1.19.1 ) contains a flaw in the CopyFile verification of policies generated by the Contrast CLI. This vulnerability allows a malicious process on an untrusted host, capable of connecting to the Kata agent VSOCK , to issue...

CVE-2026-100838

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to...