kata-containers

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

kata-containers records in CISA KEV

No kata-containers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kata Containers 5 records HIGH Runtime 4 records LOW Confidential Containers 1 record HIGH Kata-containers 1 record LOW

Records

14 records

TI-2026-19382 CVE-2026-24054

Improper check for unusual conditions in kata-containers

HIGH 77

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00514 Published 2026-01-29 Partial fix · 3.26.0 CWE-754

TI-2026-20033 CVE-2026-24834 · GHSA-wwj6-vghv-5p64

Kata Container to Guest micro VM privilege escalation

HIGH 76

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

CVSS 3.1CRITICAL 9.4 Local No auth No interaction EPSS 0.00244 Published 2026-02-19 Partial fix · 3.27.0, 0.0.0-20260219090056-6a672503973b CWE-732

TI-2026-34827 CVE-2026-47243 · GHSA-2gv2-cffp-j227

Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

HIGH 75

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

CVSS 4.0CRITICAL 9.2 Local High privileges No interaction EPSS 0.00196 Published 2026-08-07 Fixed in 3.31.0, 0.0.0-20260519062212-ffa59ce3aa78 CWE-22

TI-2026-29927 CVE-2026-41326 · GHSA-q49m-57vm-c8cc

Kata Containers: CopyFile Policy Subversion via Symlinks

HIGH 69

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

CVSS 4.0HIGH 8.2 Local No auth No interaction EPSS 0.00348 Published 2026-04-24 Partial fix · 3.29.0, 0.0.0-20260422180503-1b9e49eb2763 CWE-61

TI-2026-32189 CVE-2026-44210 · GHSA-rr59-xxvx-96qr

Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

HIGH 67

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

CVSS 4.0MEDIUM 5.8 Network Low privileges No interaction EPSS 0.00593 Published 2026-07-23 Partial fix · 3.31.0, 0.0.0-20260519062212-ffa59ce3aa78 CWE-88

TI-2026-37266 CVE-2026-50540

Kata Containers: Config Path Annotation Arbitrary File Loading

MEDIUM 43

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00425 Published 2026-08-07 Partial fix · 4.0.0 CWE-20

TI-2020-16502 CVE-2020-27151

An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1.

MEDIUM 42

An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02044 Published 2020-12-07 No fix listed

TI-2020-01941 CVE-2020-2026 · GHSA-877x-32pm-p28x

Kata Containers - Guests can trick the kata-runtime into mounting the container image on any host path

LOW 39

A malicious guest compromised before a container creation (e.g.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00475 Published 2020-06-10 Fixed in 1.11.1, 1.10.5 +2 CWE-59

TI-2020-01940 CVE-2020-2025

Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file

LOW 38

Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00313 Published 2020-05-19 Fixed in 1.11.0 CWE-284

TI-2025-36143 CVE-2025-58354

Kata Containers coco-tdx malicious host can circumvent initdata verification

LOW 36

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00334 Published 2025-09-23 Partial fix · 3.21.0 CWE-754

TI-2020-17447 CVE-2020-28914 · GHSA-6w62-mvw6-xggx

An improper file permissions vulnerability affects Kata Containers prior to 1.11.5.

LOW 31

An improper file permissions vulnerability affects Kata Containers prior to 1.11.5.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00372 Published 2020-11-17 No fix listed CWE-732

TI-2020-01938 CVE-2020-2023 · GHSA-6978-vg2j-cc9q

Kata Containers - Containers have access to the guest root filesystem device

LOW 30

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.01149 Published 2020-06-10 Fixed in 1.11.1, 1.10.5 +1 CWE-250

TI-2020-01939 CVE-2020-2024

Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host

LOW 29

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00366 Published 2020-05-19 Fixed in 1.11.0 CWE-59

TI-2026-46222 CVE-2026-64676

Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory

LOW 25

Kata Containers is an open source implementation of lightweight Virtual Machines (VMs) that perform like containers.

CVSS 3.1MEDIUM 5.7 Local No auth No interaction EPSS 0.00175 Published 2026-08-07 Fixed in 4.0.0 CWE-862

Open these records in search →

Critical	3
High	6
Medium	5
Low	0
No CVSS	0