High severity7.8NVD Advisory· Published Sep 30, 2026

CVE-2026-62146

Description

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside the container, enabling container escape.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cri O/Cri Ollm-fuzzy

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/CVE-2026-62146nvd
bugzilla.redhat.com/show_bug.cginvd
github.com/cri-o/cri-o/security/advisories/GHSA-6wmc-5877-hgc9nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000