CVE-2026-100833: Insecure Image Digest Verification in Edgeless Systems Contrast

Contrast (edgelesssys/contrast) versions 1.14.0 through 1.23.0 are vulnerable to a security policy flaw that undermines the integrity of confidential containers. The issue stems from an accidental introduction of an allow_storage rule during a Kata Containers update, which inappropriately permits storage entries using the image_guest_pull driver without enforcing image digest verification. This vulnerability allows an attacker who already possesses access to the Kata agent API to replace legitimate container images with arbitrary payloads. Because the policy fails to validate the digest, the Kata runtime accepts the unauthorized image substitution, effectively neutralizing the confidential container protection mechanisms. This flaw is particularly relevant for Kubernetes environments where the agent API may be accessible to cluster administrators or other privileged actors within the threat model.

Impact

Successful exploitation allows for the execution of unauthorized code within a confidential container environment, undermining the integrity guarantees provided by the Edgeless Systems Contrast solution. This effectively permits a sandbox escape or privilege escalation within the container lifecycle management, potentially impacting the confidentiality and integrity of all data processed within the affected confidential container workloads.

Recommendation

1. Upgrade Edgeless Systems Contrast to version 1.23.1 or later immediately to apply the corrected runtime policy logic that enforces strict digest verification.
2. Audit Kubernetes cluster RBAC configurations to restrict access to the Kata agent API, limiting the potential pool of actors who could leverage this vulnerability.
3. Review current container deployment pipelines to ensure that integrity labels and image digests are strictly enforced at the orchestrator level, providing a layer of defense-in-depth while patches are deployed.