Cri-o: malicious container can create symlink on host
Historical advisory recorded 31 Oct 2026 15:04:47 UTC. Read the latest advisory.
cve-program · CVE-2024-5154
PublishedA flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2024-5154
PublishedCri-o: malicious container can create symlink on host
A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.
- Source published
- 12 Jun 2024 08:51:43 UTC
- Source modified
- 31 Oct 2026 13:14:34 UTC
- Saved here
- 31 Oct 2026 15:04:47 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N