CVE WatchAug 24, 2026

CVE-2026-41326

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like cont

CVSS

8.2

High

EPSS

0.3%

p28

KEV

—

Exploit Today

0-100

Published: Apr 24, 2026 · Last modified: Aug 24, 2026 · CWE-61 · CWE-1220

EPSS · 30d

0.3%EPSS · 30 days0.3%

2026-08-182026-09-15

Technical description

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-906167.4 HIG

6.3%

——2In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories (e.g., /var/cache, /var/data, /var/config, and /var/tmp) in every sandbox on every app launch where, in some cases, components of the path are attacker-controlled. Missing symlink protection can redirect the directories. Some of these directories are bind-mounted by Flatpak by passing the path (e.g., /home/user/.var/app/APP_ID/cache/tmp), which contains attacker-controlled directories (tmp) to bwrap --bind SRC DST. bwrap passes the path on to the kernel, which then follows symlinks. A malicious symlink can point to arbitrary locations on the host and it will become mounted inside the sandbox.2d CVE-2026-771595.5 MED

5.8%

——2A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user.1d CVE-2026-578255.7 MED

24.1%

——7In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.2d CVE-2026-774808.8 HIG

43.8%

——13Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.1d CVE-2026-692676.5 MED

18.4%

——6Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.8d CVE-2026-668148.8 HIG

36.1%

——11Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.7h