Log in Start free

Vulnerability · Published Sep 15, 2026 · Assigned by GitHub_M

CVE-2026-47215Singularity: Incorrect path matching for 'limit container paths' directive

Medium 4.8

In plain English

A medium-severity path traversal in singularity from sylabs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)0.2%top 95.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to be run when /data/safe is allowed under setuid mode. This permits a user to run a container from outside the administrator's configured path allowlist. Installations that do not use limit container paths are not affected. This issue is fixed in SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.24singularity4.4.2-r0ALPINE-CVE-2026-47215
Gogithub.com/sylabs/singularityno fix listedGHSA-wqcr-7rf3-f64m
Gogithub.com/sylabs/singularityno fix listedGO-2026-5715
Gogithub.com/sylabs/singularity/v44.4.2GHSA-wqcr-7rf3-f64m
Gogithub.com/sylabs/singularity/v44.4.2GO-2026-5715
Ubuntu:25.10singularity-containerno fix listedUBUNTU-CVE-2026-47215
Ubuntu:26.04:LTSsingularity-containerno fix listedUBUNTU-CVE-2026-47215

Affected products (as reported)

VendorProductVersions
sylabs singularity < 4.4.2
sylabs SingularityPRO < 4.1.14>= 4.2.0, < 4.3.9

Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

References