Lei Wang

Custom frontends or clients utilizing the raw low-level API may set the `git.checkoutbundle` variable to `true` during the checkout of Git sources. A malicious Git source can exploit this configuration to trigger a crafted command invocation on the host system.

An input validation error exists where containers launched with a numeric `User` directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username. If a crafted image includes an `/etc/passwd` file that maps this large numeric string to root, the container runs as root (UID 0). This allows the Kubernetes `runAsNonRoot` restriction to be bypassed, affecting environments that require containers to run as a non-root user.

An issue exists where binding to an unrestricted IP address allows an unauthorized attacker to execute code over a network.

The NVIDIA Container Toolkit contains an issue in the `update-ldcache` hook. An attacker could potentially cause a link following by using a specially crafted container image. A successful exploit might lead to data tampering and denial of service.

NVIDIA Container Toolkit and NVIDIA GPU Operator are affected by a Time-of-Check Time-of-Use (TOCTOU) vulnerability. This flaw can allow a crafted container image to gain access to the host file system, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. A bypass was discovered for a previously patched security flaw, reflagged as CVE-2025-23359. The vulnerability exists due to errors in synchronization when using a shared resource, creating a race condition.

A privilege escalation attack was found, similar to a known issue, which can be exploited by a local attacker if the system is specially configured. This configuration includes allowing unprivileged users to run `sudo apport-cli`, having `less` configured as the pager, and the ability to set the terminal size. It is unlikely that a system administrator would configure `sudo` to allow unprivileged users to perform this class of exploit.

A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process.