CVE-2026-62146

Name of the Vulnerable Software and Affected Versions CRI-O (affected versions not specified)

Description A trust-boundary flaw exists in the sandbox state persistence of CRI-O. This issue allows attacker-influenced pod metadata to overwrite reserved sandbox bookkeeping. After a restart, this data is reloaded as trusted, which can lead to a host-side runtime-management resource being exposed inside the container during a subsequent container recreate operation, potentially enabling container escape.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.