High severity7.8NVD Advisory· Published Sep 10, 2026
CVE-2026-84042
CVE-2026-84042
Description
A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun >= 1.29
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: >=1.29
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.