Skip to content
Threat Feed
Subscribe

Vendor

Edgeless Systems

4 briefs RSS
high advisory

Incorrect Permissions in Edgeless Systems Contrast

Edgeless Systems Contrast versions 1.8.0 through 1.24.0 contain a world-writable containerd configuration file vulnerability, allowing local unprivileged users to achieve privilege escalation.

Contrast privilege-escalation linux vulnerability
1t 1c
high advisory

CVE-2026-100833: Insecure Image Digest Verification in Edgeless Systems Contrast

Edgeless Systems Contrast versions 1.14.0 to 1.23.1 contain an insecure runtime policy configuration that allows attackers with Kata agent API access to substitute container images by bypassing digest verification.

Contrast +1 vulnerability cloud-security confidential-computing credential-access kubernetes cloud
2t 1c updated
high advisory

Improper Seed Verification in Contrast Kubernetes Confidential-Computing Runtime

A vulnerability in the Contrast confidential-computing runtime allows attackers to impersonate a legitimate Coordinator by supplying a malicious seed during recovery, leading to the potential recovery of workload secrets.

PoC Contrast +1 kubernetes confidential-computing cve vulnerability attestation aTLS CVE-2026-100835
1t 2c updated
high advisory

Contrast CLI CopyFile Policy Subversion via Symlinks Allows Guest Root Filesystem Writes

A vulnerability in the CopyFile verification of Kata agent policies generated by the Contrast CLI allows arbitrary writes to the guest root filesystem, potentially leading to a full guest takeover.

Contrast CLI +2 kata-containers container-security privilege-escalation
2r 2t