Run copy with container in a malicious directory may cause container escaping

CVE-2021-33638

What is CVE-2021-33638?

An attacker leveraging the isula cp command can exploit a vulnerability to copy files from a compromised container to the host machine. This poses a significant risk as it allows the attacker to escape the container and potentially gain unauthorized access to the host system. Users of iSulad should ensure that they update to the latest version and follow security best practices to mitigate this risk.

References