UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.
Historical advisory recorded 12 Nov 2026 04:56:40 UTC. Read the latest advisory.
cve-program · CVE-2026-111433
PublishedUNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-111433
PublishedUNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.
UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.
- Source published
- 12 Nov 2026 03:45:51 UTC
- Source modified
- 12 Nov 2026 03:45:51 UTC
- Saved here
- 12 Nov 2026 04:56:40 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N