{"id":"EUVD-2026-87850","enisaUuid":"3fa1dcf2-bd96-355b-9f14-60a71daa4112","description":"Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to connect to the Kata agent VSOCK could issue a series of CopyFile requests to overwrite security-critical files in the guest or trick the workload into disclosing sensitive data, effectively amounting to a full guest takeover. Users unable to upgrade can apply an equivalent rego policy fix passed to \u0027contrast generate --policy\u0027.","datePublished":"Sep 27, 2026, 1:28:35 AM","dateUpdated":"Oct 8, 2026, 3:22:00 PM","baseScore":8.6,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255\nhttps://www.vulncheck.com/advisories/contrast-before-1.19.1-copyfile-policy-symlink-subversion\n","aliases":"CVE-2026-100838\nGHSA-h734-rggh-79xq\n","assigner":"VulnCheck","epss":0.22,"enisaIdProduct":[{"id":"6208beb0-c530-3cc4-b301-b40a30788018","product":{"name":"contrast","vendor":{"name":"edgelesssys"}},"product_version":"0 \u003c1.19.1"}],"enisaIdVendor":[{"id":"0eae10cb-30c0-3548-a249-7156459242ae","vendor":{"name":"edgelesssys"}}],"enisaIdVulnerability":[{"id":"61a60ece-0628-3e03-8224-f757c6b47fa8","vulnerability":{"id":"GHSA-h734-rggh-79xq","description":"Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to connect to the Kata agent VSOCK could issue a series of CopyFile requests to overwrite security-critical files in the guest or trick the workload into disclosing sensitive data, effectively amounting to a full guest takeover. Users unable to upgrade can apply an equivalent rego policy fix passed to \u0027contrast generate --policy\u0027.","datePublished":"Sep 27, 2026, 3:31:04 AM","dateUpdated":"Sep 27, 2026, 3:31:04 AM","baseScore":0.0,"references":"https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-100838\nhttps://www.vulncheck.com/advisories/contrast-before-1.19.1-copyfile-policy-symlink-subversion\n","enisa_id":"EUVD-2026-87850\n","aliases":"CVE-2026-100838\nGHSA-h734-rggh-79xq\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"854ea7c6-e44a-30c6-8064-151c2a4e9d63","vulnerability":{"id":"CVE-2026-100838","description":"Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to connect to the Kata agent VSOCK could issue a series of CopyFile requests to overwrite security-critical files in the guest or trick the workload into disclosing sensitive data, effectively amounting to a full guest takeover. Users unable to upgrade can apply an equivalent rego policy fix passed to \u0027contrast generate --policy\u0027.","datePublished":"Sep 27, 2026, 1:28:35 AM","dateUpdated":"Oct 8, 2026, 3:22:00 PM","status":"PUBLISHED","baseScore":8.6,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255\nhttps://www.vulncheck.com/advisories/contrast-before-1.19.1-copyfile-policy-symlink-subversion\n","enisa_id":"EUVD-2026-87850\n","assigner":"VulnCheck","epss":0.22,"dataProcessed":"Oct 29, 2026, 7:15:08 AM","vulnerabilityProduct":[{"id":"c3f1fdf7-c221-3053-93e6-4a4d34c85a97","product":{"name":"contrast","vendor":{"name":"edgelesssys"}},"product_version":"0 \u003c1.19.1"}],"vulnerabilityVendor":[{"id":"17756b6b-769a-32a2-9416-9082ef2a4281","vendor":{"name":"edgelesssys"}}]}}],"enisaIdAdvisory":[]}