Database/Container, Kubernetes & orchestration
Kata Containers: Oversight in the CopyFile policy from v3.4.0 to v3.28.0
CVSS 8.2CVE-2026-41326Container, Kubernetes & orchestrationcurated
Impact
Oversight in the CopyFile policy from v3.4.0 to v3.28.0
Who can reach it
Any tenant workload under Kata
What to do
Upgrade Kata
References
Related entries
- Kata Containers: A malicious host can circumvent guest protectionsCVE-2025-58354 · Kata ContainersMedium
- Kata Containers: Default configuration allows pod creators more than intendedCVE-2026-44210 · Kata ContainersMedium
- Kata Containers: kata-runtime host code execution via an untrusted input pathCVE-2026-50540 · Kata ContainersCritical
- Kata Containers: Kata with Cloud Hypervisor allows a user to break the VM isolation boundaryCVE-2026-24834 · Kata ContainersCritical
- Kata Containers: runtime-rs standalone virtio-fs path is vulnerable to a guest-to-host escapeCVE-2026-47243 · Kata ContainersCritical
- Kata Containers: Malformed or layer-less container image breaks Kata's handlingCVE-2026-24054 · Kata ContainersHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.