Kata Containers

Products

ProductCVEsExploitedLatest
Kata Containers12–Aug 7, 2026

Exploited and recent CVEs

  • CVE-2026-64676 Medium 5.7 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory 0.2%
  • CVE-2026-47243 Critical 9.2 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs 0.2%
  • CVE-2026-50540 Critical 9.6 Kata Containers: Config Path Annotation Arbitrary File Loading 0.6%
  • CVE-2026-44210 Medium 5.8 Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations 0.6%
  • CVE-2026-41326 High 8.8 Kata Containers: CopyFile Policy Subversion via Symlinks 0.3%
  • CVE-2026-24834 Critical 9.4 Kata Container to Guest micro VM privilege escalation 0.2%
  • CVE-2026-24054 High 8.8 Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers 0.5%
  • CVE-2025-58354 Medium 6.9 Kata Containers coco-tdx malicious host can circumvent initdata verification 0.3%
  • CVE-2020-2023 Low 3.8 Kata Containers - Containers have access to the guest root filesystem device 1.1%
  • CVE-2020-2026 High 7.8 Kata Containers - Guests can trick the kata-runtime into mounting the container image on any host path 0.5%
  • CVE-2020-2025 High 8.8 Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file 0.3%
  • CVE-2020-2024 Medium 6.5 Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host 0.4%