CVE-2026-41326

high

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

Vendor / product: Katacontainers — confidential containers

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0.

CVSS

8.2

8.2 (CVSS v3.1)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2026-04-24 19:17

Modified: 2026-11-11 23:10

NVD status: Modified

Last synced 3 hours ago

Verified against the source API 2026-11-11 23:13 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

katacontainers / confidential_containers ≥0.9.0 <0.20.0

katacontainers / kata_containers ≥3.4.0 <3.29.0

Weakness classification (CWE)

CWE-61 CWE-1220

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://github.com/kata-containers/kata-containers/commit/1b9e49eb2763aa6ea6a99b276d3ff5e2c7f658f2

References

https://github.com/kata-containers/kata-containers/commit/1b9e49eb2763aa6ea6a99b276d3ff5e2... security-advisories@github.com
https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc security-advisories@github.com
http://www.openwall.com/lists/oss-security/2026/05/13/2 af854a3a-2127-422b-91ae-364da2661108
https://access.redhat.com/errata/RHSA-2026:25200 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/security/cve/CVE-2026-41326 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://bugzilla.redhat.com/show_bug.cgi?id=2460859 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc 134c704f-9b21-4f2e-91b3-4a467353bcc0
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41326.json 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

Data sources

NVD CVE API 2.0 — fetched 2026-11-11 23:13 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores