Vulnerability
CVE-2026-88264
Descriptive record received from OpenCTI and minimised for consultation in the Intel portal.
- Sharing
- PUBLIC-OSINT
- Confidence
- 100
- Source
- The CVE Program
- Updated
- 26/09/2026 03:50
Description
A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fallback. Affected versions are crun 1.29.1 and earlier. Default configurations that mount a fresh /dev are not exposed. No fixed release is available yet.
Aliases and classifications
CWE-59Improper Link Resolution Before File Access ('Link Following')
Minimised technical details
No raw data- cvss severity
- MEDIUM
- cisa kev
- False
- cvss vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N
- cvss score
- 5.6
Provenance
Public references
- RHSA-2026:71668
https://access.redhat.com/errata/RHSA-2026:71668 - vdb-entry
https://access.redhat.com/security/cve/CVE-2026-88264 - https://github.com/containers/crun/
https://github.com/containers/crun/ - RHBZ#2531223
https://bugzilla.redhat.com/show_bug.cgi
EudorIA correlation
Intel catalogue
The vulnerability is also available in the EudorIA editorial catalogue.
Open EudorIA analysisPresence in OpenCTI describes an intelligence correlation and does not, by itself, constitute evidence of compromise, legal attribution or operational guidance applicable without context verification.