PT-2026-145674
CVE-2026-111435
·
Published
2026-11-12
·
Updated
2026-11-12
Description by
CVSS 3.1
7.4
HighMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Relative path traversal vulnerability in openEuler iSulad on Linux.
This vulnerability is associated with program file src/daemon/modules/image/oci/oci load.c.
This issue affects iSulad: through 2.1.6.
In oci load.c, oci load process manifest() does not sanitize the Config path of manifest.json. A malicious tar package can enable the isulad with the root permission to read any file on the host.
Found an issue in the description? Have something to add? Feel free to write us 👾