Skip to content
Containers Crun vulnerabilities
-
containers crun, red hat enterprise linux 10, enterprise linux 8 +4 more +6 more
Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs
CVE-2026-88264
Fix available
5.6 Medium
-
containers crun
crun follows rootfs /dev symlink while creating default devices
CVE-2026-47766
Fix available
5.1 Medium
-
containers crun
Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation
CVE-2026-30892
Fix available
0.0 None
-
containers crun
.krun_config.json symlink attack creates or overwrites file on the host in crun
CVE-2025-24965
Fix available
8.5 High
-
containers crun, fedoraproject fedora, redhat enterprise linux +1 more +3 more
Important: container-tools:rhel8 security, bug fix, and enhancement update
CVE-2022-27650
Fix available
7.5 High
-
containers crun, fedoraproject fedora +1 more
An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check...
CVE-2019-18837
8.6 High