{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata — refreshed continuously.","feed_url":"https://feed.craftedsignal.io/products/contrast-cli/","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cves":[],"_cs_exploited":false,"_cs_products":["Contrast CLI","contrast generate","Kata agent"],"_cs_severities":["high"],"_cs_tags":["kata-containers","container-security","privilege-escalation"],"_cs_type":"advisory","_cs_vendors":["Edgeless Systems","Kata Containers"],"content_html":"\u003cp\u003eA vulnerability exists in the Kata agent policies generated by the Contrast CLI (versions prior to v1.19.1). Specifically, the \u003ccode\u003eCopyFile\u003c/code\u003e verification process is flawed, enabling a malicious host process to write arbitrary data to the guest root filesystem. This attack vector leverages the Kata agent\u0026rsquo;s VSOCK interface, allowing a compromised host to connect to the agent and issue malicious \u003ccode\u003eCopyFile\u003c/code\u003e requests. The successful exploitation can overwrite critical security files or deceive the workload into divulging sensitive data. This flaw has a high impact, potentially resulting in a complete guest takeover. The issue was patched in Contrast v1.19.1.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eA malicious process gains the capability to connect to the Kata agent VSOCK.\u003c/li\u003e\n\u003cli\u003eThe malicious process connects to the Kata agent via VSOCK.\u003c/li\u003e\n\u003cli\u003eThe attacker crafts a series of \u003ccode\u003eCopyFile\u003c/code\u003e requests.\u003c/li\u003e\n\u003cli\u003eThese \u003ccode\u003eCopyFile\u003c/code\u003e requests are designed to exploit the vulnerability in the Contrast CLI-generated Kata agent policies.\u003c/li\u003e\n\u003cli\u003eThe attacker uses the \u003ccode\u003eCopyFile\u003c/code\u003e requests to create symlinks pointing to sensitive or critical system files.\u003c/li\u003e\n\u003cli\u003eThe attacker then uses \u003ccode\u003eCopyFile\u003c/code\u003e requests to write arbitrary data to the targeted files via the created symlinks.\u003c/li\u003e\n\u003cli\u003eSecurity-critical files within the guest root filesystem are overwritten or modified by the attacker.\u003c/li\u003e\n\u003cli\u003eThe compromised system facilitates a full guest takeover, potentially enabling further malicious activities within the containerized environment.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a malicious host process to gain full control over the guest container. This can lead to data exfiltration, denial of service, or further lateral movement within the infrastructure. While the exact number of affected systems is not specified, any environment relying on affected Contrast CLI versions to generate Kata agent policies is potentially at risk. The impact is a full guest takeover.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Contrast CLI to version v1.19.1 or later to remediate the vulnerability.\u003c/li\u003e\n\u003cli\u003eIf upgrading is not immediately possible, implement the policy-only fix described in the provided resources, specifically the rego fix, and pass it to \u003ccode\u003econtrast generate --policy\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eMonitor network connections to the Kata agent VSOCK for unusual or unauthorized activity, especially originating from untrusted processes.\u003c/li\u003e\n\u003cli\u003eImplement host-based intrusion detection systems (HIDS) to detect unauthorized file modifications within the guest root filesystem.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-04-30T20:57:17Z","date_published":"2026-04-30T20:57:17Z","id":"/briefs/2026-04-contrast-copyfile-vuln/","summary":"A vulnerability in the CopyFile verification of Kata agent policies generated by the Contrast CLI allows arbitrary writes to the guest root filesystem, potentially leading to a full guest takeover.","title":"Contrast CLI CopyFile Policy Subversion via Symlinks Allows Guest Root Filesystem Writes","url":"https://feed.craftedsignal.io/briefs/2026-04-contrast-copyfile-vuln/"}],"language":"en","title":"CraftedSignal Threat Feed — Contrast CLI","version":"https://jsonfeed.org/version/1.1"}