crun vulnerabilities (SUSE)

3 vulnerabilities.

• crun SUSE crun follows rootfs /dev symlink while creating default devices CVE-2026-47766 Fix available 5.1 MediumMay 28, 2026
• crun SUSE .krun_config.json symlink attack creates or overwrites file on the host in crun CVE-2025-24965 Fix available 8.5 HighFebruary 11, 2025
• crun SUSE runc container breakout through process.cwd trickery and leaked fds CVE-2024-21626 Public exploitFix available EPSS 18.9% 8.6 HighJanuary 31, 2024