Threats tagged 'ghsa-ggww-wrxv-mmw2'

CVE-2026-84042 is a high-severity vulnerability in crun affecting versions 1.29 and later. When crun is built with libkrun and a container is started rootful with passt networking enabled (krun.use_passt), it allows execution of attacker-controlled payloads from the container image with host root privileges. This is a regression introduced in version 1.29 due to improper privilege management, resulting in privilege escalation to host root. Mitigation currently involves avoiding running untrusted container images with krun and passt networking until a fixed version is released.