CVE-2026-77176

Name of the Vulnerable Software and Affected Versions Kata Containers (affected versions not specified)

Description In configurations using genpolicy for Confidential Containers guest protection, insufficient validation of CreateContainer mount and storage rules allows a malicious host operator to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content. This can lead to the exposure of confidential information or the acceptance of attacker-controlled input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.