{"id":"CVE-2026-77176","aliases":["AZL-97442","AZL-97479","EUVD-2026-63432"],"status":"published","title":"Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy","description":"A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content, potentially exposing confidential information or enabling the acceptance of attacker-controlled input.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00478,"percentile":0.41537,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-73"],"published":"2026-08-20T16:20:17Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Azure Linux:3","package":"kata-containers","fixed_in":["3.32.0.kata0-5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"kata-containers-preview","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.27.0~preview2-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"kata-containers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.0.kata0-5"}]}]}],"products":[{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 5"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-77176","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517502","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://github.com/kata-containers/kata-containers/security/advisories/GHSA-fmg6-v47x-52wr"},{"url":"http://www.openwall.com/lists/oss-security/2026/08/20/19"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77176","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-77176","title":"Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy","description":"A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content, potentially exposing confidential information or enabling the acceptance of attacker-controlled input.","status":"published","published":"2026-08-20T16:20:17.729Z","modified":"2026-10-31T08:42:59.006Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-73"],"updated_at":"2026-11-02T14:20:15.712761Z"}],"euvd":[{"id":"EUVD-2026-63432","description":"A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content, potentially exposing confidential information or enabling the acceptance of attacker-controlled input.","status":"published","published":"2026-08-20T16:20:17Z","modified":"2026-10-31T08:42:59Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:59:00.860117Z"}],"nvd":[{"id":"CVE-2026-77176","description":"A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content, potentially exposing confidential information or enabling the acceptance of attacker-controlled input.","status":"published","published":"2026-08-20T17:19:49.773Z","modified":"2026-10-31T09:16:34.05Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-73"],"updated_at":"2026-11-02T14:12:40.302911Z"}],"osv":[{"id":"AZL-97442","title":"CVE-2026-77176 affecting package kata-containers-preview 3.27.0~preview2-2","description":"A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content, potentially exposing confidential information or enabling the acceptance of attacker-controlled input.","status":"published","published":"2026-08-20T17:19:49Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:26.280152Z"},{"id":"AZL-97479","title":"CVE-2026-77176 affecting package kata-containers for versions less than 3.32.0.kata0-5","description":"A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content, potentially exposing confidential information or enabling the acceptance of attacker-controlled input.","status":"published","published":"2026-08-20T17:19:49Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:12.313414Z"}]}}