CVE-2026-44210

Summary: CVE-2026-44210 describes a VM escape in Kata Containers prior to 3.31.0 where default pod annotations enable virtiofsd extra args and kernel params, allowing an attacker with pod-creation privileges to inject arguments that override the virtiofsd shared directory to the host root. This c...

CVE-2026-24834

CVE-2026-24834 affects Kata Containers before 3.27.0. A flaw in the interaction with Cloud Hypervisor allows a container user to modify the Guest micro VM’s filesystem, potentially achieving arbitrary code execution as root inside the VM. The host and other containers/VMs on the same host are not...

CVE-2026-24054

Kata Containers Runtime (kata-containers) versions prior to 3.26.0 are affected. When a container image is malformed or has no layers, containerd bind-mounts an empty snapshotter directory for the container rootfs; the Kata runtime then mounts rootfs and may detect it as a block device, causing t...