kata-containers vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20267

Newest CVEs

• CVE-2026-64676

  Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory

  kata-containers · kata-containers

  Medium5.7
• CVE-2026-47243

  Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

  kata-containers · kata-containers

  Critical9.2
• CVE-2026-50540

  Kata Containers: Config Path Annotation Arbitrary File Loading

  kata-containers · kata-containers

  Critical9.6
• CVE-2026-44210

  Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

  kata-containers · kata-containers

  Medium5.8
• CVE-2026-41326

  Kata Containers: CopyFile Policy Subversion via Symlinks

  kata-containers · kata-containers

  High8.2
• CVE-2026-24834

  Kata Container to Guest micro VM privilege escalation

  kata-containers · kata-containers

  Critical9.4
• CVE-2026-24054

  Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers

  kata-containers · kata-containers

  High8.8
• CVE-2025-58354

  Kata Containers coco-tdx malicious host can circumvent initdata verification

  kata-containers · kata-containers

  Medium6.9