CVE-2026-62146
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
31/100
Published: 2026-09-30
Modified: 2026-10-27
First seen: 2026-10-29
Status: active
Attack Surface
No Interaction
Conf. Impact
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Changed
C:
High
I:
High
A:
High
Description
A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside the container, enabling container escape.