Read the docs
TI-2026-32189 Aliases CVE-2026-44210GHSA-rr59-xxvx-96qr

Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

Priority HIGH 67CWE-88Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
None · None · None
Fix status
Partial Red Hat: 1 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-88.

Summary

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Versions prior to 3.31.0 ship with a default configuration that allows pod creators to inject arbitrary command-line arguments into the virtiofsd process through the `io.katacontainers.config.hypervisor.virtio_fs_extra_args` pod annotation. By injecting `-o source=/` along with `--no-announce-submounts` and `--sandbox=none`, an attacker can override the virtiofsd shared directory to serve the entire host root filesystem into the guest VM. Combined with the `kernel_params` annotation (also enabled by default) to activate the agent debug console, the attacker can mount the host filesystem from inside the VM and read or write any file on the host, including /etc/shadow. Version 3.31.0 patches the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00593 48th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial kata-containers (kata-containers): 3.31.0github.com/kata-containers/kata-containers (Go): 0.0.0-20260519062212-ffa59ce3aa78Red Hat: 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
kata-containerskata-containersbefore 3.31.03.31.0Patch availableCNA
—github.com/kata-containers/kata-containers (Go)before 0.0.0-20260519062212-ffa59ce3aa780.0.0-20260519062212-ffa59ce3aa78Patch availableGHSA-rr59-xxvx-96qr
  • kata-containers Vendorkata-containers Affected before 3.31.0 Fixed in 3.31.0 Patch available CNA
  • github.com/kata-containers/kata-containers (Go) Vendor— Affected before 0.0.0-20260519062212-ffa59ce3aa78 Fixed in 0.0.0-20260519062212-ffa59ce3aa78 Patch available GHSA-rr59-xxvx-96qr

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:katacontainers:kata_containers:*:*:*:*:*:*:*:*before 3.31.0Vulnerablekata-containers
  • cpe:2.3:a:katacontainers:kata_containers:*:*:*:*:*:*:*:* Versions before 3.31.0 Vulnerable ·kata-containers

Remediation

  • Fix · CNA kata-containers (kata-containers) Fixed in 3.31.0
  • Fix · GHSA-rr59-xxvx-96qr github.com/kata-containers/kata-containers (Go) Fixed in 0.0.0-20260519062212-ffa59ce3aa78 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Not affected: 1 product
  • Red Hat OpenShift Container Platform 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-44210
  2. 2026-10-03 Alias added: GHSA-rr59-xxvx-96qr

References

Exploit 1

Patch 1

Advisory 1

Other 1

  • TI-2026-19382 Improper check for unusual conditions in kata-containers CVSS 4.0HIGH 8.8
  • TI-2026-20033 Kata Container to Guest micro VM privilege escalation CVSS 3.1CRITICAL 9.4
  • TI-2026-29927 Kata Containers: CopyFile Policy Subversion via Symlinks CVSS 4.0HIGH 8.2
  • TI-2020-16502 An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1. CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences