containers crun vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20263

Newest CVEs

• CVE-2026-88264

  Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs

  containers · crun

  Medium5.6
• CVE-2026-47766

  crun follows rootfs /dev symlink while creating default devices

  containers · crun

  Medium5.1
• CVE-2026-30892

  Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation

  containers · crun

  None0.0
• CVE-2025-24965

  .krun_config.json symlink attack creates or overwrites file on the host in crun

  containers · crun

  High8.5