CVE-2026-64676

Name of the Vulnerable Software and Affected Versions Kata Containers versions prior to 4.0.0

Description The kata-agent contains an authorization bypass in confidential-guest memory management. In Confidential Containers (CoCo) deployments, the kata-agent uses an OPA/Rego-based AgentPolicy to authorize ttRPC API calls, which serves as the security boundary against untrusted hosts. Two ttRPC methods associated with the mem-agent feature lack this authorization check. If the mem-agent is enabled, an untrusted host can unconditionally invoke these methods to manipulate in-guest memory management by forcing swap, aggressive eviction, or compaction. This can lead to performance degradation and impact the availability of the confidential workload. This issue does not allow for code execution or memory disclosure.

Recommendations Update to version 4.0.0. As a temporary mitigation, ensure the mem-agent feature remains disabled.