Container Misconfiguration Vulnerability in runc by Open Containers Initiative
CVE-2026-41579

3.3LOW

Key Information:

Vendor

Opencontainers

Status
Runc
Vendor
CVE Published:
1 July 2026

What is CVE-2026-41579?

A vulnerability in runc allows an attacker to exploit symlink behavior in container image setups, potentially leading to unauthorized file deletions or symlink creations on the host system. This occurs when malicious images are used that include /dev as a symlink, allowing runc to issue commands that can compromise the host environment. The issue has been addressed in subsequent dversions, which mitigate the risk by handling symlinks securely.

Affected Version(s)

runc < 1.3.6 < 1.3.6

runc >= 1.4.0-rc.1, < 1.4.3 < 1.4.0-rc.1, 1.4.3

runc >= 1.5.0-rc.1, < 1.5.0-rc.3 < 1.5.0-rc.1, 1.5.0-rc.3

References

https://github.com/opencontainers/runc/security/advisorie...
x_refsource_CONFIRM
https://github.com/opencontainers/runc/commit/864db8042dbb
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.