CVE-2026-48785

Name of the Vulnerable Software and Affected Versions apptainer versions prior to 1.5.1

Description Incorrect path matching occurs within the limit container paths directive. This issue specifically affects SUID installations where paths listed in limit container paths are string prefixes of other existing paths that should not be included. For example, if /scratch is listed as a permitted path but /scratch2 also exists and contains container images, the system would previously match and include /scratch2 incorrectly. The fix ensures that only images under the exactly matching path are included.

Recommendations Update apptainer to version 1.5.1.