Threats tagged 'ghsa-ppgw-cqj8-9qrg'

A vulnerability (CVE-2026-88264) was found in crun where, if the container configuration does not assign a dedicated mount for /dev, terminal setup can redirect /dev/console onto an unintended device. This flaw can lead to a scenario where integrity of the container environment is compromised. The issue affects multiple versions of crun up to 1.29.1 and several specific older versions. A security update including crun version 1.30-1.hum1 has been released by Red Hat to address this issue.