Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
Buildah could let containers read/write outside their folder
published 1 month ago
Summary
The Buildah tool’s networking component does not correctly limit where a container can access files, so a container could reach parts of the host system it shouldn’t. This could allow an attacker to view or change sensitive data. Upgrade to a version that fixes the issue as soon as it’s available, or temporarily restrict container privileges and limit mounted directories.
What to do
- Update cleanstart buildah to version 1.19.4-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | buildah |
< 1.19.4-r0 Fix: upgrade to 1.19.4-r0
|
Original advisory text
improper limitation of path name flaw was found in containernetworking/cni in versions before 0
Security vulnerability affects the buildah package. An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published30 Sep 2026
Updated8 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2024-OS27994 · OSV
Track software like this
Free during beta