CVE-2026-111435

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...

CVE-2026-111433

UNIX symbolic link symlink following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted malicious imag...

CVE-2026-111434

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations such as create...

CVE-2026-111436

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered...

CVE-2026-111436

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered...

CVE-2026-111436

The openEuler iSulad daemon on Linux contains a missing release of memory after effective lifetime vulnerability (CWE-401) in the file src/daemon/modules/spec/specs_mount.c. This issue affects versions through 2.1.6 . Frequent triggering of the vulnerability causes a memory leak that exhausts hos...

CVE-2026-111436

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered...

EUVD-2026-124258

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be triggered...

CVE-2026-111435

The openEuler iSulad tool on Linux (versions through 2.1.6 ) is vulnerable to a relative path traversal vulnerability in the src/daemon/modules/image/oci/oci_load.c file. The root cause is that the oci_load_process_manifest() function fails to sanitize the Config path of manifest.json. An attacke...

EUVD-2026-124257

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...

CVE-2026-111435

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...

CVE-2026-111435

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...

CVE-2026-111434

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations such as create...

CVE-2026-111434

The openEuler iSulad container runtime (versions through 2.1.6 ) is vulnerable to a Use of Externally-Controlled format string vulnerability in the file src/daemon/modules/image/oci/oci_load.c. When the iSulad daemon performs container lifecycle operations (such as create, start, exec, or stop) v...

EUVD-2026-124256

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations such as create...

CVE-2026-111434

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations such as create...

CVE-2026-111433

UNIX symbolic link symlink following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted malicious imag...

EUVD-2026-124255

UNIX symbolic link symlink following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted malicious imag...

CVE-2026-111433

UNIX symbolic link symlink following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specsmount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted malicious imag...

CVE-2026-111433

The openEuler iSulad container engine on Linux (versions through 2.1.6 ) is vulnerable to a UNIX symbolic link (symlink) following flaw in the src/daemon/modules/spec/specs_mount.c file. If an attacker can prompt the platform to run a crafted malicious image, they can trick the iSulad daemon into...