Medium severity · published Sep 15, 2026
CVE-2026-47215
Singularity: Incorrect path matching for 'limit container paths' directive
4.8
CVSS
0.2%
EPSS
No
On KEV
Description
SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to be run when /data/safe is allowed under setuid mode. This permits a user to run a container from outside the administrator's configured path allowlist. Installations that do not use limit container paths are not affected. This issue is fixed in SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
SingularityPRO · sylabs
< 4.1.14; >= 4.2.0, < 4.3.9 · source: vendor
SI
singularity · sylabs
< 4.4.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-47215
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-47215
github.com
https://github.com/sylabs/singularity/commit/c08791793e843d4c9c1f2fc1d9d12abef747378f
github.com
https://github.com/sylabs/singularity/commit/c1dc9470a769e6e534b588a4ed521768ca4fc0d1
github.com
https://github.com/sylabs/singularity/pull/4152
github.com
https://github.com/sylabs/singularity/releases/tag/v4.4.2
github.com
https://github.com/sylabs/singularity/security/advisories/GHSA-wqcr-7rf3-f64m
More from singularity
9.8
CVE-2021-33027
Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce
9.8
CVE-2021-33622
Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value
9.3
CVE-2020-15229
Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability
8.8
CVE-2020-25040
Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than…
8.8
CVE-2019-11328
An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g