CyberRota Analysis
AI-GeneratedA vulnerability exists in the container checkpoint and restore feature of CRI-O, where insufficient validation of restore metadata can lead to unintended operations on the host filesystem by a privileged user. This issue poses a high risk, particularly for environments where the checkpoint and restore functionality is enabled and untrusted checkpoint content is utilized. Organizations using CRI-O should prioritize addressing this vulnerability to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host filesystem. Successful exploitation requires that container checkpoint and restore functionality is enabled, which is not the default configuration. An attacker must also be able to trigger restoration of a container from untrusted checkpoint content.