This vulnerability arises from insufficient validation of CreateContainer mount and storage rules in Kata Containers when genpolicy is used for Confidential Containers guest protection. A malicious host operator can exploit this to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content. This can lead to exposure of confidential information or acceptance of attacker-controlled input. The CVSS v3.1 score is 8.1 (High), with network attack vector, low complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality and integrity impact. The vulnerability is tracked as CWE-73 (External Control of File Name or Path). No official remediation level or patch is currently stated in the vendor advisory, and no known exploits in the wild have been reported.

The vulnerability allows a malicious host operator to bypass protections by mounting arbitrary container-rootfs paths over sensitive host locations or provisioning arbitrary content. This can lead to exposure of confidential information and compromise of data integrity by accepting attacker-controlled input. There is no reported impact on availability. The flaw affects confidentiality and integrity with high impact.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-77176 for current remediation guidance. No official fix or temporary workaround is currently documented. Users should monitor the vendor advisory for updates and consider restricting host operator privileges where possible to reduce risk.