CyberRota
Back to database

CVE-2026-41326

HIGH · CVSS 8.2 EPSS 0.05% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-24 · Last synced: 2026-05-24

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-41326
Severity
HIGH
CVSS
8.2
EPSS
0.05%

Original NVD Description

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0.