Skip to content
Threat Feed
Subscribe

Product

CRI-O

3 briefs RSS
high advisory

CRI-O Sandbox State Persistence Trust-Boundary Vulnerability

A trust-boundary vulnerability in CRI-O allows an attacker to manipulate pod metadata to overwrite sandbox bookkeeping, enabling container escape via host-side resource mounting upon container recreation.

CRI-O container-security privilege-escalation runtime-security
1t 1c
high advisory

CRI-O Checkpoint and Restore Metadata Validation Vulnerability

A vulnerability in the CRI-O container checkpoint and restore feature (CVE-2026-15801) allows an authenticated user to perform unauthorized host filesystem operations through insufficient metadata validation.

CRI-O vulnerability container-security privilege-escalation
1t 1c
high advisory

CRI-O Environment Variable Injection Vulnerability (CVE-2026-15809)

A critical vulnerability, CVE-2026-15809, in CRI-O allows an attacker with the ability to set container environment variables to bypass a previous fix (CVE-2022-4318), inject a newline character into the HOME environment variable, and add arbitrary lines to /etc/passwd, potentially leading to privilege escalation or persistence within the container.

CRI-O +2 container linux vulnerability privilege-escalation persistence
1r 1t 2c