containers crun vulnerabilities
4 published CVEs name containers crun among the affected products.
- 4Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-88264
Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs
containers · crun
Medium5.6 - CVE-2026-47766
crun follows rootfs /dev symlink while creating default devices
containers · crun
Medium5.1 - CVE-2026-30892
Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation
containers · crun
None0.0 - CVE-2025-24965
.krun_config.json symlink attack creates or overwrites file on the host in crun
containers · crun
High8.5