Read the docs
TI-2026-79983 Aliases CVE-2026-113951

Apple Container flaw lets container writes run commands on macOS host

Priority LOW 35CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

Apple Container from 0 before 1.5.0 is affected. Incorrect default permissions (CWE-276) let an attacker who can write to the filesystem of a Linux container plant an exec credential plugin in the cluster kubeconfig at /etc/kubernetes/admin.conf. When a user pulls that kubeconfig onto the macOS host and runs kubectl against it, kubectl runs the plugin as the host user, which allows arbitrary command execution on the host.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it — turning filesystem access inside an untrusted Linux container into arbitrary command execution on the host. This vulnerability is addressed in Container version 1.5.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00204 10th percentileScored 2026-11-07
Fix Fixed Container (Apple): 1.5.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AppleContainerbefore 1.5.01.5.0Patch availableCNA
  • Container VendorApple Affected before 1.5.0 Fixed in 1.5.0 Patch available CNA

Remediation

Upgrade Apple Container to version 1.5.0, which fixes this vulnerability.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

  • Fix · CNA Container (Apple) Fixed in 1.5.0

Timeline

  1. 2026-10-23 Threatist record created from CVE-2026-113951
  2. 2026-11-02 CVSS score added · CISA ADP
  3. 2026-11-02 Weakness changed · CISA ADP
  4. 2026-11-02 CISA SSVC decision points changed

References

Other 1

  • TI-2026-46583 Improper authentication in Apple macOS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-28008 Out-of-bounds write in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-22441 Apple iOS and iPadOS: An attacker with arbitrary read and write capability may be able to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-22440 Memory corruption in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-17951 Out-of-bounds write in Apple Safari KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-17847 Use after free in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 10.0
See all 9536 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences