This vulnerability in CRI-O stems from an improper fix of CVE-2022-4318. An attacker who can set environment variables on a container can exploit this flaw by injecting newline characters into the HOME environment variable. This manipulation enables the attacker to insert arbitrary lines into the /etc/passwd file, which could lead to privilege escalation or unauthorized access. The CVSS v3.1 score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. The vulnerability affects Red Hat Confidential Compute Attestation components using CRI-O. No explicit affected versions or patch information are provided in the advisory or metadata.

Successful exploitation allows an attacker with limited privileges (capable of setting container environment variables) to modify the /etc/passwd file by injecting arbitrary lines. This can lead to unauthorized privilege escalation, compromising confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-15809 for current remediation guidance. There is no explicit mention of an official fix or temporary workaround in the provided advisory content. Users should monitor the vendor advisory for updates and apply patches promptly once available.