The Lab · 2026-04-06 08:27:04 · GitHub Issues
A critical security vulnerability has been identified in crun, a widely used open-source OCI container runtime. The flaw, designated CVE-2026-30892, stems from an incorrect parsing logic for the `--user` option within the `crun exec` command. Specifically, when a local user specifies the value `1`, the runtime incorrec...
The Lab · 2026-04-06 08:27:05 · GitHub Issues
A critical security flaw in the open-source crun container runtime enables local privilege escalation, allowing a user to gain root-level access. The vulnerability, tracked as CVE-2026-30892, stems from a parsing error in the `crun exec` command. When a user specifies the `--user` option with the value `1`, the system ...
The Lab · 2026-04-06 08:27:08 · GitHub Issues
A critical security flaw in the open-source crun container runtime enables local privilege escalation, posing a direct threat to containerized environments. The vulnerability, tracked as CVE-2026-30892, stems from a parsing error in the `--user` option during `crun exec` commands. Specifically, the runtime incorrectly ...