PT-2026-96052 · Cri-O · Cri-O

CVE-2026-15801

·

Published

2026-09-21

·

Updated

2026-09-21

CVSS v3.1

8.0

High

VectorAV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions CRI-O (affected versions not specified)
Description An issue exists in the container checkpoint and restore feature where insufficient validation of restore metadata can allow a user with sufficient privileges to perform unintended operations on the host filesystem. This requires the container checkpoint and restore functionality to be enabled and the ability to trigger the restoration of a container using untrusted checkpoint content.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-15801

Affected Products

Cri-O