Unscored severity · published Oct 23, 2026
CVE-2026-113951
If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf
New
–
CVSS
0.3%
EPSS
No
On KEV
Description
If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it — turning filesystem access inside an untrusted Linux container into arbitrary command execution on the host. This vulnerability is addressed in Container version 1.5.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Container · Apple
before 1.5.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-113951
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-113951
github.com
https://github.com/apple/container/security/advisories/GHSA-44v5-vx46-ghv6
More from Container
7.8
CVE-2026-20613
The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member
7.5
CVE-2026-64773
An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for…
6.5
CVE-2026-28909
Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext
4.3
CVE-2026-64777
A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside…