CyberRota Analysis
AI-GeneratedKata Containers prior to version 4.0.0 are vulnerable to host code execution due to an unvalidated configuration path annotation, allowing pod users to load arbitrary TOML files from the host. This vulnerability enables attackers to execute code as root on the host by selecting a malicious hypervisor or virtio-fs daemon binary. Organizations using Kata Containers should prioritize upgrading to version 4.0.0 to mitigate this critical risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated configuration path annotation. The runtime accepts an arbitrary io.katacontainers.config_path pod annotation and loads the referenced host TOML file without restriction. As a result, a pod user who can place a file at a host-visible path can supply a configuration that selects an attacker-controlled hypervisor or virtio-fs daemon binary, executing code as root on the host. This issue is fixed in version 4.0.0.