CyberRota Analysis
AI-GeneratedA vulnerability exists in crun versions 1.29.1 and earlier, where improper container configuration can allow an attacker to redirect /dev/console to a malicious path if /dev is not mounted separately. This can lead to unauthorized access or manipulation of console output, posing a risk to container security. Organizations using crun in their containerized environments should prioritize addressing this issue, especially if they are not using default configurations that mount a fresh /dev.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fallback. Affected versions are crun 1.29.1 and earlier. Default configurations that mount a fresh /dev are not exposed. No fixed release is available yet.