KA
Product
kata-containers
7
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 1Low 0
Watch
Add kata-containers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24054 | 10.0 | Jan 29 | Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers Affected: < 3.26.0 |
| CVE-2026-44210 | 9.9 | Jul 23 | Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations Affected: < 3.31.0 |
| CVE-2026-50540 | 9.6 | Aug 7 | Kata Containers: Config Path Annotation Arbitrary File Loading Affected: < 4.0.0 |
| CVE-2026-47243 | 9.2 | Aug 7 | Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs Affected: < 3.31.0 |
| CVE-2026-24834 | 8.8 | Feb 19 | Kata Container to Guest micro VM privilege escalation Affected: < 3.27.0 |
| CVE-2026-41326 | 8.2 | Apr 24 | Kata Containers: CopyFile Policy Subversion via Symlinks Affected: >= 3.4.0, < 3.29.0 |
| CVE-2026-64676 | 5.7 | Aug 7 | Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory Affected: < 4.0.0 |
Showing 7